North Korean Hackers Tied to Recent NPM Supply Chain Breaches
Amazon Threat Intelligence links the compromise of popular NPM packages—axios, debug, chalk, typo‑crypto—to a DPRK‑affiliated actor tracked as SAPPHIRE SLEET/BlueNoroff. The group coerces trusted maintainers to push malicious updates, exposing every downstream user. AWS now offers tools to detect and respond to such supply‑chain threats.