LofyGang – Software Supply Chain Attackers; Organized, Persistent, and operating for over a year
Checkmarx discovered 200 malicious NPM packages with thousands of installations linked to an attack group called “LofyGang”. This group has been operating for over a year with hacking objectives like credit card information, discord “nitro” (premium) upgrades, streaming services accounts and more.