“Contagious” Code: North Korean Hackers Infiltrate Developer Workflows via Visual Studio Code

Jamf Threat Labs reports that the DPRK-linked 'Contagious Interview' campaign now targets developers by embedding malicious payloads in Visual Studio Code tasks.json files and the Node.js/npm workflow (including malicious install scripts), executing obfuscated JavaScript that beacons to a C2 every five seconds; developers are urged to vet repositories, package.json, install scripts, and task configurations before marking projects as trusted.