North Korea-Linked Hackers Hide JavaScript Loaders in Open Source Repositories

A new wave of supply chain attacks is spreading across the open source world, and this time the target is developers themselves. Security researchers have uncovered a campaign called PolinRider that hides malicious JavaScript loaders inside trusted code repositories, waiting for unsuspecting developers to run them. The campaign has been linked to North Korean threat […] The post North Korea-Linked Hackers Hide JavaScript Loaders in Open Source Repositories appeared first on Cyber Security News.