North Korea-Linked npm Packages Disguise Themselves as Rollup Polyfills for Data Theft3. July 2026CybersecurityMalicious npm packages impersonate legitimate Rollup polyfills and enable North Korean actors to steal data and gain remote access to developer systems. Share on: