The PolinRider campaign is a North Korean-linked supply chain attack targeting multiple open-source software ecosystems, where malicious packages are published to public repositories to deliver staged remote access trojan (RAT) payloads. The article does not provide a CVSS score, specific affected or fixed version numbers, or a technical workaround for this ongoing threat.
2026-07-01 (Back to Inventory) PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems Author(s): Karlo Zanki Organization: Socket js.jadesnow Open article directly Open article on Archive.org Related Articles 2026-06-07 ⋅ Socket ⋅ Socket Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave Shai-Hulud 2026-05-31 ⋅ Socket ⋅ Kirill Boychenko Famous Chollima Targets PHP Developers Through Compromised Packagist Package JADESNOW 2026-04-07 ⋅ Socket ⋅ Kirill Boychenko North Korea’s Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads