npm Lookalike Packages Target Developer Secrets

North Korea-linked malicious npm packages mimicked Rollup polyfill tooling to steal developer secrets and enable remote access. Remove suspect packages, rotate exposed keys, and review dependency changes.