Malicious NPM Package Installation Associated With XORIndex Campaign

Aaron Mog@AaronMogS2S

•updated Jul 20, 2025•1•1•39

Detects the installation of specific malicious npm packages associated with the North Korean "Contagious Interview" campaign. These packages are known to deliver the XORIndex malware loader.