Online reports that the Socket research team has found in a new attack that North Korean hacker group Lazarus is linked to six new malicious npm software packages that attempt to deploy backdoors to steal user credentials. In addition, these malware can also extract cryptocurrency data and steal sensitive information from Solana and Exodus crypto-wallets. The attack mainly targets files in Google Chrome, Brave and Firefox browsers and keychain data in macOS, specifically tricking developers into unintentionally installing these malicious software packages.