Linked to North Korean fake job-recruitment campaigns, the poisoned repositories are aimed at establishing persistent access to infected machines.
Malicious Next.js Repos Target Developers Via Fake Job Interviews
Summary + source link. No paywalls, no tracking.