Bubble.io's good name is being tarnished by advanced and convincing phishing lures.
North Korean hackers used an updated version of a known backdoor to target a popular npm package.