North Korean Cyberspies Target GitHub Developers
The North Korean APT is setting up legitimate accounts on GitHub and social media platforms to pose as developers or recruiters — ultimately to fool targets into loading npm repositories with malicious code.
North Korea North Korean Github Alexis Wales Reconnaissance Bureau Poisoning The Software Supply Chain Foreign Intelligence
Source: darkreading.com