A North Korean attack group is running a scam operation called the Graphalgo, wherein they use fake job schemes to deliver malware.
Operation Dream Job is evolving once again, and now comes through malicious dependencies on bare-bones projects.