{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreiekgfpegtndnjqn3gcump6tmun25pwvd5mos7qpq2w4yhkifw3mou",
"uri": "at://did:plc:6wtxqaikjf62unmnajbfbq5v/app.bsky.feed.post/3mhh6dg6qeuu2"
},
"coverImage": {
"$type": "blob",
"ref": {
"$link": "bafkreiexu67lizijbyqnn4pokyawrhwhce4oqrs6ztmwnk6efp2cmjenp4"
},
"mimeType": "image/jpeg",
"size": 179026
},
"path": "/north-korea-linked-waterplum-used-new-stoatwaffle-malware-in-vscode-supply-chain-campaign/",
"publishedAt": "2026-03-19T15:10:23.000Z",
"site": "https://vpncentral.com",
"tags": [
"News",
"North Korea-linked WaterPlum used new StoatWaffle malware in VSCode supply chain campaign",
"VPN Central"
],
"textContent": "A North Korea-linked threat cluster known as WaterPlum has started using a new malware family called StoatWaffle in a supply chain-style campaign that abuses Visual Studio Code project workflows. Research published on March 17 says the malware appeared in blockchain-themed repositories rigged to execute automatically when a developer opened the folder in VS Code and […]\n\nThe post North Korea-linked WaterPlum used new StoatWaffle malware in VSCode supply chain campaign appeared first on VPN Central.",
"title": "North Korea-linked WaterPlum used new StoatWaffle malware in VSCode supply chain campaign"
}