N. Korean Famous Chollima Hackers Use Malicious npm Packages to Steal Data

DevOps.com

by Jeff Burt

March 3, 2026

A group of more than two dozen malicious npm packages used to steal secrets and credentials from software developers has all the hallmarks – from infrastructure to operations – of Famous Chollima, the North Korean nation-state actor linked to the ongoing high-profile Contagious Interview scam. Threat researchers with Socket and Kieran Miyamoto of the DPRK […]

Verticals

devopstech

Originally published on DevOps.com on 3/3/2026