North Korean hackers hijack NPM libraries, putting millions of apps at risk
Amazon Threat Intelligence traced compromises of npm packages axios, debug, chalk and typo‑crypto to a DPRK‑linked group known as Sapphire Sleet (also BlueNoroff). The actors socially engineered maintainers to publish malicious updates, so any system auto‑updating these libraries could be infected. This shows a state‑backed supply‑chain risk for millions of apps that rely on open‑source code.