"This deception tricks unsuspecting developers into installing the compromised package ... state-sponsored attack," stating the North Korean threat actors behind the hack took steps to erase traces of ...