News North Korea’s npm Supply Chain Attack Hit Rollup Developer Tools by Rebecca Sutton July 4, 2026 by Rebecca Sutton July 4, 2026 Researchers at JFrog traced a fresh npm supply chain attack to North Korea’s Lazarus group, six lookalike packages built to steal developer credentials and cloud keys. FacebookTwitterLinkedinEmail