Void Dokkaebi Hackers Spread Malware Through Fake Job Interviews

Void Dokkaebi (aka Famous Chollima) is conducting a sophisticated supply-chain campaign that weaponizes fake developer job interviews to distribute malware via malicious Visual Studio Code workspace tasks and obfuscated JavaScript injected into ignored config files; the attack self-propagates as infected developers commit hidden .vscode configurations to repositories, enabling a worm-like spread across open-source and enterprise projects, with payload delivery hosted on blockchain networks and evidence of active exploitation across hundreds of repositories.