CryptoThe Hacker Newsabout 2 hours ago
Amazon Links npm Hijack to North Korea's Sapphire Sleet
1 min read
Amazon attributed the September 2025 hijack of npm packages debug and chalk to North Korea's Sapphire Sleet. The group also compromised axios in March 2026 and planted trojanized typo-crypto in March 2025. Amazon's evidence cites shared tradecraft but no new compromises.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
Summary by ByteBrief
