Amazon researchers link the compromises of four npm packages, including axios, over the past 18 months to the North Korea-linked group tracked as Sapphire Sleet (Carly Page/The Register)

Carly Page / The Register:
Amazon researchers link the compromises of four npm packages, including axios, over the past 18 months to the North Korea-linked group tracked as Sapphire Sleet  —  Researchers say Sapphire Sleet socially engineered maintainers before publishing malicious updates through trusted accounts

from Techmeme https://ift.tt/CNgksbL