NewsHive
CONTACT USANALYST PORTAL →
securityBACKGROUND

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

BACKGROUND
1 SIGNALFIRST DETECTED 30 July 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
Other feeds and industry voices
30 Jul
Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer

REPORT · WHAT · The Hacker NewsOPEN STORY
19 May
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv ecosystem as part of

REPORT · HOW · The Hacker NewsOPEN STORY
Sources
BleepingComputer

NewsHive monitors these sources continuously. All signal titles above link to the original reporting.

Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →