The North Korea-linked Contagious Interview campaign has expanded to five open-source ecosystems — npm, PyPI, Go, Rust, and PHP (Packagist) — publishing over 1,700 malicious packages since January 2025. These packages impersonate legitimate developer tooling and act as malware loaders that fetch second-stage payloads with Show more