DPRK's 'Contagious Interview' Spawns Malicious Npm Package Factory

North Korean threat actors operate the persistent 'Contagious Interview' campaign that lures developers with fake job interviews and delivers hundreds of malicious npm packages (over 197 packages and ~31,000+ downloads) to install OtterCookie/BeaverTail malware. The malware provides RAT, keystroke logging, screenshot capture, clipboard theft, and credential/cryptocurrency exfiltration; attackers leverage GitHub and Vercel infrastructure for staged delivery and maintain continuous, product-like operations against Web3 and blockchain developers.