discovered 2026-05-28
Contagious Trader package published by toskypi (Feb 2026). Exfiltrates to sha256-validate-rpc.vercel[.]app. Attributed to DPRK Famous Chollima via toskypi identity (tosky.pi1016@gmail.com).
