North Korean Threat Actors Utilize PolinRider Campaign to Distribute 108 Malicious Software Packages and Extensions

North Korean threat actors are leveraging the PolinRider campaign, known as Contagious Interview, to compromise software developers by tricking them into installing malicious packages and browser extensions.

The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spanning npm, Packagist, Go, and Google Chrome as part of an ongoing activity referred to as PolinRider.

"The campaign remains active, and new malicious packages are likely to continue appearing as threat actors compromise maintainer accounts,

Read original article