North Korean threat actors, linked to the Contagious Interview campaign, have published 108 malicious packages and web browser extensions across npm, Packagist, Go, and Google Chrome. This ‘PolinRider’ campaign remains active, with new malicious packages expected as attackers compromise maintainer accounts. Developers are advised to exercise extreme caution and verify the authenticity of packages before integration.