DPRK operators are continuing Contagious Interview recruitment lures by inviting targets to private code repositories whose `.npmrc` files redirect npm to an alternate registry. A malicious dependency referenced in `package.json` does not resolve through the public registry and is delivered only when the target installs the project within the configured repository. This selective delivery reduces exposure to public package scanning while preserving the campaign's established fake-job social-engineering model. The episode distinguishes this activity from GhostAction's separate, non-DPRK imitation of PolinRider's fake-font technique.