North Korean hackers used an updated version of a known backdoor to target a popular npm package.