Earliest Known PolinRider Malware Found in 2025 npm Packages

The earliest known PolinRider malware has been found in npm packages from 2025, OpenSourceMalware reports. A hijacked maintainer account shipped the North Korean payload eight months before the first documented victims.