Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Amazon linked the compromises of the typo-crypto, debug, chalk, and axios npm packages to the North Korean Sapphire Sleet threat actor. The group socially engineered maintainers to publish malicious updates, affecting an estimated 10% of cloud environments within two hours.