AWS ties NPM attacks to North Korea

Amazon has linked recent compromises of popular NPM libraries including axios, debug, chalk and typo-crypto to a DPRK-linked threat actor known as Sapphire Sleet and BlueNoroff, saying maintainers were socially engineered before malicious package updates were pushed. The AWS research says axios has more than 100 million weekly downloads and that attackers are adapting supply-chain tactics for AI-era code review.

Source: AWS