Skip to content
Taeyoung Kim

Topic

Security & Technology Intelligence

Source-verified reporting on cybersecurity, software supply chains, AI, and the engineering impact of technology industry changes.

CybersecurityOpen SourceSupply ChainThreat IntelligenceTechnology Reporting

Suggested reading path

  1. 01Suspected North Korea-Linked npm Malware Disguised as Rollup Polyfills
  2. 02North Korea-Linked PolinRider Campaign Expands Beyond npm to Go and Chrome

Security & Technology Intelligence

Suspected North Korea-Linked npm Malware Disguised as Rollup Polyfills

Six malicious npm packages imitated Rollup polyfills to target credentials on developer workstations and CI systems. Here is how teams should respond.

Security & Technology Intelligence

North Korea-Linked PolinRider Campaign Expands Beyond npm to Go and Chrome

The North Korea-linked PolinRider campaign expanded across npm, Go, Packagist, Chrome extensions, GitHub repositories, and developer tools.

Related tags

#Security#Supply Chain#North Korea