Packagist

North Korean PolinRider campaign floods npm, Packagist, Go and Chrome Web Store with malicious code

bylawry
July 6, 2026

North Korean state-linked hackers running the PolinRider campaign have pushed 108 malicious packages and browser extensions to npm, Packagist, Go and Chrome, highlighting the growing supply-chain risk in open ecosystems. Developers and admins are urged to harden maintainer accounts, audit dependencies and restrict unvetted extensions.

North Korean PolinRider campaign floods npm, Packagist, Go and Chrome Web Store with malicious code

How to Reserve and Change Your WhatsApp Username

Netflix Tames Wide Cassandra Partitions with Dynamic Splitting, Slashing Read Latency

North Korean PolinRider campaign floods npm, Packagist, Go and Chrome Web Store with malicious code

How to Preorder Grand Theft Auto VI: Editions, Platforms, and What to Expect

JadePuffer ransomware shows first end‑to‑end attack run by an AI agent

The Ultimate Showdown to Find the Best JavaScript Package Manager for Your Projects: npm vs Yarn vs pnpm

How to pass command line arguments to npm script