OpenSourceMalware flags North Korean hackers targeting crypto devs with fake job offers
- —Contagious Interview lures crypto developers via LinkedIn job offers
- —A tampered .npmrc makes npm fetch packages from an external registry
- —The method lowers the odds of detection by public security scanners
- —No victim count, affected firms or losses were disclosed
Why it matters: Crypto developers remain a prime North Korean target, and a poisoned dependency can expose keys and funds.
Source: ChainCatcher 链捕手