North Korean Hackers Compromise Popular npm Packages to Target Developer Environments

North Korea–linked operators have quietly turned popular npm packages into a high‑volume access vector for developer and build environments, chaining multipl...