Amazon Links North Korea to Open-Source Software Attacks

Amazon identified a threat actor linked to the Democratic People’s Republic of Korea (DPRK) as the group behind multiple recent compromises of widely used open-source software libraries. The company warned that the attacks highlight a growing threat to software supply chains that underpin government and commercial IT systems. Amazon Threat Intelligence said on July 29 that the DPRK-linked threat actor targeted popular Node Package Manager (NPM) libraries, including the axios, debug, chalk, and t