Socket.dev blog
Famous Chollima Targets PHP Developers Through Compromised Packagist Package · 2026-05-31T18:41:00.591Z
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.