PolinRider Caused Dozens of npm, Go, PHP Compromises

North Korea’s PolinRider campaign has silently compromised dozens of npm, Go, and PHP packages by automating malware propagation through infected developer machines, leveraging stolen credentials and invisible code injection to spread across ecosystems without deliberate targeting or traditional account takeovers.