npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things

What started as what I thought was going to be a quick look into a suspicious GitHub organization turned into a much deeper rabbit hole with an active npm backdoor, more than a dozen fake developer personas, and recruitment posts looking for overseas facilitators. Individually there’s a lot of interesting pieces here but together they … Continue reading npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things