North Korean hacker group uses malicious npm packages to steal crypto wallet credentials

AiCoin2026/05/01 00:15

Show original

Bitget offers one-stop trading for cryptocurrencies, stocks, and gold. Trade now!

A welcome pack worth 6200 USDT for new users! Sign up now!

According to Cryptopolitan, ReversingLabs has discovered that the North Korean hacker group Famous Chollima used a malicious npm package named PromptMink to compromise the open-source crypto trading project openpaw-graveyard by submitting code generated by Anthropic's Claude Opus AI model. This allowed them to steal users' crypto wallet credentials and system keys. Since September 2025, the group has been continuously distributing malicious npm packages, employing a two-layer strategy: first releasing “decoy” packages without malicious code, then carrying out attacks through a second-layer package. After the second-layer package is taken down, replacement versions are quickly published.

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

Understand the market, then trade.

Bitget offers one-stop trading for cryptocurrencies, stocks, and gold.

Trade now！

Kevin Hassett, Director of the White House National Economic Council, stated that the recent substantial decline in technology stocks does not indicate a comprehensive sell-off risk for the AI industry. He acknowledged that some enterprises are indeed burdened with significant debt, which warrants attention. However, he also pointed out that there are many financially strong companies within the industry that hold both equity and debt in related firms; these companies may be poised to acquire or provide funding support when opportunities arise.

华尔街见闻•2026/11/02 20:01