North Korean hackers have been exploiting the npm registry to distribute malware targeting crypto developers, according to US cybersecurity firm Socket. The hackers uploaded over 300 malicious code packages disguised as legitimate tools for website and crypto app development. Once downloaded, these packages implant malware designed to steal user passwords, browser data, and crypto wallet keys. Socket has identified this operation as 'Contagious Interview,' highlighting its sophistication and backing by North Korean state actors. The attackers often pose as tech recruiters to lure blockchain and Web3 developers into downloading the malicious packages, aiming to compromise their systems and access sensitive information.