Socket.dev blog
PolinRider Spreads Through Compromised GitHub Accounts and Packagist · 2026-09-17T15:33:22.860Z
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads. | From article: A major disruption of the North Korea-linked operators associated with this campaign appears unlikely in the near term.