PolinRider: DPRK Threat Actor Implants Malware in Hundreds of GitHub Repos

A North Korean threat actor known as PolinRider has launched a massive, ongoing supply chain attack by covertly implanting highly evasive, blockchain-controlled malware into hundreds of open-source GitHub repositories, enabling credential theft, crypto exfiltration, and remote access across the open-source software ecosystem.