Latest North Korea DPRK news

One North Korea-linked threat cluster now publishes malicious packages across npm, PyPI, Go Modules, crates.io, and Packagist in parallel, reusing the same staging infrastructure and loader patterns. Socket has tracked more than 1,700 packages tied to the broader Contagious Interview …

Ten high-impact npm maintainers, including the engineers behind Fastify, Lodash, dotenv, and Express, were approached using the same playbook that compromised Axios. Tay attributes the campaign to UNC1069, the DPRK-nexus group that spent eight years perfecting fake interviews against crypto …

A North Korean spy's own malware infection exposed the mastermind behind the Polyfill.io attack. Hudson Rock traced 100+ credentials on one laptop to Funnull CDN, a US crypto exchange, and a Japanese defense lab.