North Korea’s Npm Attack Is a Malware Factory, Not a Hack
North Korean hackers are running a persistent campaign called “Contagious Interview,” using fake job offers to trick developers into downloading malicious npm packages. They’ve created a near-automated factory, delivering over 197 packages with 31,000+ downloads since October to steal crypto and cre