Developing3 outlets · over 7 hours
Amazon links npm hijacks to North Korean hackers
Amazon linked four npm package compromises over 18 months to the North Korean Sapphire Sleet group. The hackers social-engineered maintainers to publish malicious updates, targeting packages including typo-crypto, debug, chalk, and axios. The malware is tracked as MAL-2026-3400.
The story so far2 updates, latest first.
Tracked by ByteBrief