[north-korea]

July 5, 2026

• North Korea's PolinRider campaign publishes 108 malicious packages/extensions across npm, Packagist, Go, and the Chrome Web Store, linked to the ongoing Contagious Interview cluster. Compromised maintainer accounts mean the count is expected to grow. The Hacker News · Threat Activity

in Confidential Computing's Root of Trust May Be Unfixable