NPM Isn't Prepared For North Korean PolinRider Attack

OpenSourceMalware documents the PolinRider DPRK supply‑chain campaign that compromises individual GitHub developers and injects obfuscated JavaScript loaders into their repositories and npm packages; the case study focuses on DiogoAngelim's fetch-page-assets (multiple live malicious versions), provides timelines of account-wide force-pushes, concrete IOCs (package versions, commit SHAs, file hashes, Git blobs, Ethereum C2 wallet, RPC endpoints), and urges registry-level changes (maintainer-level advisories, direct notifications, pattern-based detection, cross-system correlation) to address the scale and persistence of the threat.