North Korean Hackers Target Open Source Developers in Supply Chain Attacks

North Korean hackers have been targeting open source developers in supply chain attacks through a campaign known as PolinRider. This campaign has compromised over 100 legitimate open source packages and repositories, using them to deliver malicious software. The malware includes a backdoor and an information stealer, which are installed on the systems of developers. The goal of the campaign is to infiltrate the systems of these developers. The attacks are part of a larger effort to compromise supply chains.