Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
Summary + source link. No paywalls, no tracking.