DevThe Recordabout 3 hours ago
Amazon ties npm hijacks to North Korean hackers
1 min read
Amazon attributed four npm package compromises, including axios, debug, chalk, and typo-crypto, to North Korea's Sapphire Sleet. The hackers socially engineered maintainers to publish malicious updates, stealing passwords, cryptocurrency, and personal data. The malware is tracked as MAL-2026-3400.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
