Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft a maintainer phished through a lookalike npm domain and a walletdraining script pushed into at least 18 packages carrying more than 2 billion weekly downloads between them. The original Aikido and Wiz reports did not attribute the.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity