Threat Intelligence / Actor / PolinRider (DPRK / Contagious Interview / Lazarus cluster)

PolinRider (DPRK / Contagious Interview / Lazarus cluster)

Nation: North Korea (DPRK) · 1 tracked threat(s) · Categories: SUPPLY_CHAIN

Also known as: Contagious Interview, TasksJacker, WaterPlum, Nickel Alley, Lazarus Group, DeceptiveDevelopment

Tracked threats

PolinRider — DPRK Supply-Chain Campaign Compromises 1,951 GitHub Repos via Malicious npm Packages, VS Code tasks.json Auto-Run, and TRON/Aptos/BSC Blockchain Dead-Drop C2 — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence