OpenSourceBleepingComputerabout 2 hours ago
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
1 min read
Amazon linked the compromises of the typo-crypto, debug, chalk, and axios npm packages to the North Korean Sapphire Sleet threat actor. The group socially engineered maintainers to publish malicious updates, affecting an estimated 10% of cloud environments within two hours.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
See how this developed
