Socket

Famous Chollima Targets PHP Developers Through Compromised Packagist Package (opens in new tab)

Covers Contagious Interview: Malware delivered through fake developer job interviewsCovered by This Week In 4n6, The Hacker News

The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Read the original article
Sign in to keep reading the full article.
Sign UpLog In

Covered in 2 articles

This Week In 4n6·

Week 23 – 2026

Feeds
The Hacker News·

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help