#sapphiresleet — Public Fediverse posts

Amazon ties North Korean hackers to open-source supply chain attacks on the axios, debug, and chalk NPM packages. Here's how the campaign worked.

#NorthKorea #SapphireSleet #NPM #SupplyChainAttack #OpenSource #InfoSec

https://securityonline.info/north-korea-npm-supply-chain/?utm_source=mastodon&utm_medium=jetpack_social

Amazon Links Four npm Supply-Chain Attacks to North Korea’s Sapphire Sleet

A trusted software update can become a malware delivery system when attackers gain control of the account publishing…
#EuropeSays #Korea #KR #NorthKorea #amazon #amazonthreatintelligence #npm #open-sourcesecurity #sapphiresleet #supplychainsecurity
https://www.europesays.com/korea/108275/

📢 Amazon attribue plusieurs compromissions NPM (axios, debug, chalk) au groupe nord-coréen SAPPHIRE SLEET

Cet article présente les conclusions de l'Amazon Threat Intelligence sur une série d'attaques de supply chain open source attribuées à un acteur lié à la Corée du Nord (DPRK).

📖 cyberveille : https://cyberveille.ch/posts/2026-08-02-amazon-attribue-plusieurs-compromissions-npm-axios-debug-chalk-au-groupe-nord-coreen-sapphire-sleet/
🌐 source : https://aws.amazon.com/fr/blogs/security/amazon-identifies-north-korean-hacker-group-behind-open-source-supply-chain-attacks/
🟢 vérification factuelle haute
#NPM #SAPPHIRESLEET #Cyberveille

Amazon Ties npm Hijack to North Korea's Sapphire Sleet

In a shocking supply-chain hijack, North Korea's Sapphire Sleet group compromised over 2 billion weekly downloads of popular npm packages, including debug and chalk, in a brazen attack tied to multiple other malicious campaigns. Amazon Threat Intelligence has linked this September 2025 incident to a string of attacks dating back to March 2025.

https://osintsights.com/amazon-ties-npm-hijack-to-north-koreas-sapphire-sleet?utm_source=mastodon&utm_medium=social

#NorthKorea #SapphireSleet #Npm #SupplyChain #EmergingThreats

Microsoft Links North Korea to Mastra AI Supply Chain Compromise

Microsoft has uncovered a massive supply chain attack on the npm registry, where over 140 packages were compromised, and has linked the operation with high confidence to Sapphire Sleet, a notorious North Korean state actor known for targeting the financial sector. This large-scale attack highlights the growing threat of North Korean hacking…

https://osintsights.com/microsoft-links-north-korea-to-mastra-ai-supply-chain-compromise?utm_source=mastodon&utm_medium=social

#NorthKorea #SapphireSleet #MastraAi #SupplyChain #NpmRegistry

Microsoft attributes Mastra AI supply chain attack to North Korean hackers Sapphire Sleet

Microsoft warns that a recent supply chain attack on the Mastra AI npm environment was carried out by Sapphire Sleet, a notorious North Korean hacking group known for targeting the financial sector. This latest incident is part of a larger pattern of attacks that exploit open-source distribution channels.

https://osintsights.com/microsoft-attributes-mastra-ai-supply-chain-attack-to-north-korean-hackers-sapph?utm_source=mastodon&utm_medium=social

#SapphireSleet #NorthKoreanHackers #SupplyChain #MastraAi #Npm

Sapphire Sleet Targets macOS in Multi-Stage Intrusion Campaign
#SapphireSleet
https://www.levelblue.com/blogs/spiderlabs-blog/sapphire-sleet-targets-macos-in-multi-stage-intrusion-campaign

Crypto-Targeting North Koreans Wield Fake Zoom Meetings https://www.byteseu.com/1970418/ #APT38 #BlueNoroff #CageyChameleon #Conflicts #cybersecurity #DPRK #InformationSecurity #LazarusGroup #NickelGladstone #NorthKorea #Pyongyang #SapphireSleet #StardustChollima #TA444

UNC1069 trasforma Axios in un vettore di spionaggio: WAVESHAPER.V2 colpisce la supply chain npm

https://insicurezzadigitale.com/unc1069-trasforma-axios-in-un-vettore-di-spionaggio-waveshaper-v2-colpisce-la-supply-chain-npm/

North Korea’s Cyber Evolution and China’s Storm-2077 Unveiled by Microsoft Analysts https://thecyberexpress.com/microsoft-insights-on-chinese-threat-actor/ #NorthKoreanThreatActors #LockbitRansomwareNews #TheCyberExpressNews #Chinesethreatactor #TheCyberExpress #FirewallDaily #SapphireSleet #PressRelease #CYBERWARCON #CyberNews #Gitex2022 #Storm2077

North Korea-linked APT Sapphire Sleet targets IT job seekers with bogus skills assessment portals – Source: securityaffairs.com https://ciso2ciso.com/north-korea-linked-apt-sapphire-sleet-targets-it-job-seekers-with-bogus-skills-assessment-portals-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #SapphireSleet #BreakingNews #SecurityNews #hackingnews