PolinRider Spreads Through Compromised GitHub Accounts and Packagist

The PolinRider campaign leverages compromised GitHub developer accounts to stealthily plant persistent malware in source repositories and development branches of popular Packagist packages, enabling widespread supply chain compromise through routine development workflows rather than direct package registry attacks.