Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at least 18 packages carrying more than 2 billion weekly downloads between them.

The original Aikido and Wiz reports did not attribute the

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Attack Update: Top 5 Attack-IPs auf doode.info – 28.07.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 345 requests (recent log) 34.65.117.95 — 176 requests (recent log) 216.73.216.19 — 143 requests (recent

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model broke into real third-party systems, marking

A Biography of Lee Holloway, the Architect of Cloudflare’s Technology (Part 1)

A Biography of Lee Holloway, the Architect of Cloudflare’s Technology (Part 1) Source: Hacker News