The Blueprint of a North Korean Attack on Open-Source

See a step-by-step reverse-engineered demo of a North Korean attack on an open-source npm library, demonstrating potential damage and low-effort prevention methods.

Overview

I reverse engineered an attempted attack on better-auth, one of the most popular auth libraries on npm. My demo shows you a step-by-step what happens when your repo is under attack and damage it can cause.