PolinRider Jumps the Fence to Go, Packagist, npm, PyPI

PolinRider is a DPRK-linked supply-chain campaign that compromises GitHub accounts to append obfuscated JavaScript loaders into legitimate repositories, enabling automatic distribution into ecosystem models that resolve code from repos (notably Go modules and Packagist) and delivering a Lazarus stealer toolkit (Beavertail/InvisibleFerret/OmniStealer); the report includes IOCs (compromised repos, TRON/Aptos addresses, XOR keys, loader signatures), a timeline of expansion, and actionable remediation steps for maintainers.