Back to today’s briefing

Story perspectives

North Korean OtterCookie Malware Threatens Software Supply Chains

5/12/2025

33 6

Summary

Story summary

A new wave of OtterCookie malware, tied to North Korean cyber operations, has emerged, with versions 3 and 4 ramping up their ability to steal files and credentials. Meanwhile, malicious npm packages aimed at macOS users of the Cursor code editor are compromising security by pilfering credentials and altering software. These developments underscore the escalating dangers within software supply chains.

1 of 1

Story summary

A new wave of OtterCookie malware, tied to North Korean cyber operations, has emerged, with versions 3 and 4 ramping up their ability to steal files and credentials. Meanwhile, malicious npm packages aimed at macOS users of the Cursor code editor are compromising security by pilfering credentials and altering software. These developments underscore the escalating dangers within software supply chains.