Bogus npm Packages Used to Trick Software Developers into Installing Malware

An ongoing social engineering campaign is targeting software developers with bogus npm packages under the guise of a job interview to trick them into downloading a Python backdoor.
Cybersecurity firm Securonix is tracking the activity under the name DEV#POPPER, linking it to North Korean threat actors.
"During these fraudulent interviews, the developers are often asked

backdoor bogus campaign cybersecurity dev developers engineering fraudulent interview job malware name north north korean npm packages python python backdoor securonix social social engineering software software developers targeting threat threat actors tracking trick under