Amazon Threat Intelligence linked the axios, debug, chalk, and typo-crypto npm compromises to the same DPRK-linked actor, warning that social engineering of maintainers, AI-generated personas, slopsquatting, and AI-targeted package review attacks are raising open-source supply-chain risk.
Amazon Identifies North Korean Hacker Group Behind Open-Source Supply Chain Attacks
Amazon Threat Intelligence linked the axios, debug, chalk, and typo-crypto npm compromises to the same DPRK-linked actor, warning that social engineering of maintainers, AI-generated personas, slopsquatting, and AI-targeted package review attacks are raising open-source supply-chain risk.
Source: Amazon