npm Malware, Fake Devs, and Deepfake Videos: These Are A Few of My Favorite DPRK Things (opens in new tab)

What started as what I thought was going to be a quick look into a suspicious GitHub organization turned into a much deeper rabbit hole with an active npm backdoor, more than a dozen fake developer…