Reversing a DPRK-linked toolkit that backdoors VS Code, Cursor, Discord and npm, with an Ethereum dead-drop C2 and a DEV#POPPER variant

First reported Oct 22, 2026, 10:21 UTC

Source reports

• Reversing a DPRK-linked toolkit that backdoors VS Code, Cursor, Discord and npm, with an Ethereum dead-drop C2 and a DEV#POPPER variant https://ift.tt/RkGn4au Submitted October 20, 2026 at 07:46PM by WobbaMan777 via reddit https://ift.tt/lVQfkGW — Закрепи.sender, Oct 22, 2026, 10:21 UTC

Excerpts are quoted from the linked sources, which own their text.

All news events