Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers:
Amazon linked multiple high-profile open-source software supply chain attacks ...
bleepingcomputer.com/news/security/amazon-links-debug-chalk-npm-supply-chain-attacks-to-north-korean-hackers/
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
any attempt to expose, alter, disable, destroy, steal or gain unauthorized access to or make unauthorized use of a computer system
Similar to This
Previous
pnpm: Lightning-fast and smart package management for Node.js - | Golem.de: pnpm accelerates and simplifies package management for Node.js through innovative ...
golem.de/news/pnpm-blitzschnelles-und-smartes-paketmanagement-fuer-node-js-2609-213448.html
Paid articlePaywall Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
dlvr.it Jul 30
Amazon links four poisoned npm packages to one North Korean crew: Researchers say Sapphire Sleet socially engineered maintainers before publishing malicious ...
theregister.com/cyber-crime/2026/07/30/amazon-links-four-poisoned-npm-packages-to-one-north-korean-crew/5281120
AsyncAPI npm packages infected with credential-stealing malware: Five malicious versions of AsyncAPI packages were published to the Node Package Manager ...
bleepingcomputer.com/news/security/-asyncapi-npm-packages-infected-with-credential-stealing-malware/
Microsoft links Mastra AI supply chain attack to North Korean hackers: Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than ...
bleepingcomputer.com/news/security/microsoft-links-mastra-ai-supply-chain-attack-to-north-korean-hackers/
dlvr.it Jun 17
Homebrew 6.0 released with new security mechanism, Linux sandbox and more: Homebrew was 'less vulnerable 10 years ago than npm is today,' project lead tells us
theregister.com/devops/2026/06/17/homebrew-60-released-with-new-security-mechanism-linux-sandbox-and-more/5257570
securityweek.com Jun 13
NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks: In response to recent software supply chain attacks, NPM version 12 is blocking the ...
securityweek.com/npm-12-will-change-script-execution-behavior-to-prevent-supply-chain-attacks/
dlvr.it Jun 10
GitHub pulls pin on npm's auto-run scripts: Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors
theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453
New IronWorm malware hits 36 packages in npm supply-chain attack: A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with ...
bleepingcomputer.com/news/security/new-ironworm-malware-hits-36-packages-in-npm-supply-chain-attack/
dlvr.it May 27
CrowdStrike, Google shatter Glassworm botnet: Developer-targeted, supply-chain attacks all the rage these days
theregister.com/cyber-crime/2026/05/27/crowdstrike-google-shatter-glassworm-botnet/5247337
dlvr.it May 19
Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
theregister.com/cyber-crime/2026/05/19/shai-hulud-keeps-burrowing-314-npm-packages-infected-after-another-account-compromise/5242601
dlvr.it May 12
Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650
Shai Hulud attack ships signed malicious TanStack, Mistral npm packages: A large-scale software supply-chain attack involving the "Shai-Hulud" malware ...
bleepingcomputer.com/news/security/shai-hulud-attack-ships-signed-malicious-tanstack-mistral-npm-packages/
New npm supply-chain attack self-spreads to steal auth tokens: A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer ...
bleepingcomputer.com/news/security/new-npm-supply-chain-attack-self-spreads-to-steal-auth-tokens/
5 ways to spot software supply chain attacks and stop worms - before it's too late
zdnet.com/article/5-ways-to-spot-software-supply-chain-attacks-and-stop-worms-before-its-too-late/
New wave of ‘fake interviews’ use 35 npm packages to spread malware: A new wave of North Korea's 'Contagious Interview' campaign is targeting job ...
bleepingcomputer.com/news/security/new-wave-of-fake-interviews-use-35-npm-packages-to-spread-malware/
Next