HealthcareInfoSecurity reports that Amazon Web Services linked compromises of open-source JavaScript packages including Axios, Debug, Chalk, and Typo-Crypto to the North Korean threat actor tracked as Sapphire Sleet or Stardust Chollima, underscoring continuing npm and PyPI supply-chain risk.
North Korea Behind Slew of JavaScript Supply-Chain Hacks
HealthcareInfoSecurity reports that Amazon Web Services linked compromises of open-source JavaScript packages including Axios, Debug, Chalk, and Typo-Crypto to the North Korean threat actor tracked as Sapphire Sleet or Stardust Chollima, underscoring continuing npm and PyPI supply-chain risk.
Source: Healthcareinfosecurity