This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
We’re tracking more North Korea-linked PolinRider activity across GitHub and Packagist.
New findings: 4 malicious dev versions, rewritten Git history, and obfuscated JavaScript planted in index.php and executed through PHP’s shell_exec() function.
https://socket.dev/blog/polinrider-github-packagist
2026-09-17T18:23:32.062Z