Threat Intelligence Report

PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems

📅 July 2, 2026 📰 socket.dev/ 🔍 0 CVE(s) referenced

North Korean threat actors have dramatically expanded the PolinRider supply chain campaign across npm, Packagist, Go modules, and Chrome extensions, leveraging sophisticated loader-based malware and stealthy commit techniques to compromise developer environments and distribute credential-stealing payloads.

vendor

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle