The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spanning npm, Packagist, Go, and Google Chrome as part of an ongoing activity referred to as PolinRider.

“The campaign remains active, and new malicious packages are likely to continue appearing as threat actors compromise maintainer accounts,