N. Korean Famous Chollima Hackers Use Malicious npm Packages to Steal Data
DevOps - The Web's Largest Collection of DevOps Content [Unoffi…
March 3, 2026
A group of more than two dozen malicious npm packages used to steal secrets and credentials from software developers has all the hallmarks – from infrastructure to operations – of Famous Chollima, the North Korean nation-state actor linked to the ongoing high-profile Contagious Interview scam. Threat researchers with Socket and Kieran Miyamoto of the DPRK […]
Discussion in the ATmosphere