New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

Source: The Hacker News

Cybersecurity researchers have discovered malicious code in an npm package after a malicious package was added as a dependency to a project by Anthropic’s Claude Opus large language model (LLM).

The package in question is @validate-sdk/v2, which is listed on npm as a utility software development kit (SDK) for hashing, validation, encoding/decoding, and secure random generation. However, its real purpose is malicious.