ReversingLabs linked PromptMink to the North Korean-linked Famous Chollima group, describing a software-supply-chain campaign that used layered npm packages to target Web3 and crypto development workflows. A Claude Opus co-authored commit added the malicious @validate-sdk/v2 dependency to an autonomous crypto trading agent, allowing the package to execute code capable of exposing wallet and credential material. The campaign separated bait packages from disposable payload packages, letting actors replace detected malicious dependencies while preserving the credibility of first-layer packages. PromptMink evolved from obfuscated JavaScript secret theft to larger executable-based payloads, SSH key deployment, project zipping and exfiltration, and PyPI expansion, illustrating how AI-assisted development can amplify dependency risk.