Tag: repository poisoning

1 Attack Reports | 0 Vulnerabilities

Attack reports

Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories

Void Dokkaebi, also known as Famous Chollima, has evolved its operations into a self-propagating supply chain threat targeting software developers. The North Korea-aligned group uses fabricated job interviews to lure developers into cloning malicious repositories. Once compromised, the victim's mac…

supply chain attack

invisibleferret

blockchain infrastructure

developer targeting

fake job interview

git history tampering

repository poisoning

vs code exploitation

worm propagation

Published: April 21, 2026

Downloadable IOCs: 10

Click here to see more Attack Reports