Tech Mar 4, 2026 4 min "StegaBin" hides C2 in Pastebin zero-width characters and ships malicious npm packages North Korea's Famous Chollima released 26 npm packages as part of the Contagious Interview campaign, hiding C2 URLs in zero-width Unicode characters inside Pastebin essays and delivering a 9-module RAT through Vercel deployments. Security npm Supply chain Malware North Korea