As cited
Copy frozen at (site build).
threat intel
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
North Korean threat actors associated with the Contagious Interview campaign have published 108 malicious packages and browser extensions across npm, Packagist, Go, and Google Chrome in a campaign tracked as PolinRider. The campaign remains active with ongoing compromises of maintainer accounts expected to introduce additional malicious packages.
Why it matters: Development teams should review dependencies in these package managers and extensions for the PolinRider indicators of compromise to prevent supply chain compromise.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
North Korean threat actors associated with the Contagious Interview campaign have published 108 malicious packages and browser extensions across npm, Packagist, Go, and Google Chrome in a campaign tracked as PolinRider. The campaign remains active with ongoing compromises of maintainer accounts expected to introduce additional malicious packages.
Why it matters: Development teams should review dependencies in these package managers and extensions for the PolinRider indicators of compromise to prevent supply chain compromise.
- Source published
- First seen by Cybersecurity Tracker