Sonatype
Hijacked npm Package Nearly Delivers PolinRider RAT · 2026-05-21T20:51:42.000Z
Sonatype believes these packages are associated with PolinRider, an Advanced Persistent Threat (APT) group linked with North Korea. If downloaded onto a developer machine, these malicious packages lead to full compromise and immediate action is needed.