New Tactics from a Familiar Threat (call-blockflow npm package)

Veracode blog (incl. migrated Phylum research posts)

This blog post highlights evolving tactics from a North Korean campaign that began in September 2023 with a package published on 4 July 2024 in npm. ... This threat actor has used social engineering to lure software developers into fake job interviews in which the malicious package is part of a “coding interview.”