“These attackers are setting up new but legitimate seeming company profiles, including plausible LinkedIn presences, in order to pass cursory inspection.”
North Korea has figured out that the cheapest way into a million build pipelines is one tired maintainer on a video call. The arrayref crate already fell in August. The whole ecosystem runs on volunteers who get a publish key and zero security support. A fake job offer and a “missing audio codec” beats every signature scheme in the registry.