And you're also running a workshop here, right? Can you tell me more about that?

Yes, I'm running a workshop tomorrow here at Recon Village at 10 a.m., so check it out if you're in the area.

It will be about one of the campaigns that we have tracked this year related to Contagious Trader.

Contagious Trader, for those who don't know, is a wave of malware attributed to famous Colima, who is a DPRK-affiliated nation-state group.

um we have tracked this campaign extensively with over 50 npm packages as of may 2026 and by now there's probably 50 more um so we will dive into that methodology that we have used ourselves to be able to track this uh from distribution layer which happens at the social media So operators creating fake identities to find victims that they can target with crypto related projects.

Usually this happens through GitHub and NPM because they are open source projects.

ecosystems, which I do think people, you know, it is the backbone of the modern technology stocks and people have an implicit trust, I think, still.

And do you remember the first malware sample or, you know, campaign that really hooked you up?