The OpenSourceMalware Show #19

This podcast/blog episode reports the arrest of two alleged TeamPCP members and presents an operational briefing on DPRK-linked PolinRider: developers remain persistently infected by a RAT/info‑stealer that injects malicious payloads into repos and published packages, including a new NullReceiver payload and a particularly dangerous persistence technique that overwrites the npm CLI; the campaign has broadened target file types and continues to reinfect projects via collaborative workflows, prompting a call for disclosure and coordinated remediation.