← Back to feed
cybersecurity1 source · 2h ago

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon attributes the 2025 hijack of npm packages debug and chalk and related supply chain compromises to North Korea-linked group Sapphire Sleet despite disputed evidence of attribution.

Affected◉ North Korea▪ Axios▪ chalk▪ core-js▪ debug▪ npm▪ typo-crypto▪ Aikido▪ Amazon▪ Google▪ Microsoft▪ North Korea▪ Sapphire Sleet
⌗ 1 outlet · 1 origin · Balanced
India × 1

No Reader read of this story yet.

Perspectives

The story's competing narratives, side by side — grouped by stance, with every outlet's origin and affiliation visible.

Perspective analysis pending — it generates as coverage from more origins arrives.

What to expect

First-order impacts with their likely second-order effects — direction and horizon per node.

Impact analysis pending.

Sources (1)

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet — Prism