North Korea Has a Better Open Source Contribution Strategy Than Some Startups

Remember when downloading an npm package only meant arguing with dependency hell? Those were simpler times. Now you also have to wonder whether your new dependency is quietly working for North Korea. Researchers have uncovered 108 malicious packages and browser extensions spread across npm, Packagist, Go modules, and even the Chrome Web Store. Because apparently one package registry wasn't enough.…