Reactime, a popular open-source React debugging tool maintained by Open Source Labs, was compromised with malware attributed to North Korea. The implant executes when the repository is opened in VS Code, uses Ethereum blockchain for command-and-control, and persists by injecting into Discord and VS Code with zero antivirus detections across multiple samples.