North Korea's Contagious Interview operations used social engineering to direct cryptocurrency, fintech, and Web3 developers to malicious coding-challenge repositories whose loaders contacted short-lived serverless infrastructure. VirusTotal missed 20 of 26 indicators evaluated for this campaign, including `stanionstudios.com`, which received zero detections across 92 engines. The broader study concludes that reputation feeds lack the package-lifecycle and developer-environment context needed to identify quiet, newly created supply-chain infrastructure.