Amazon identifies North Korean hacker group behind open-source supply chain attacks

Amazon has uncovered that a North Korean threat group is behind a series of sophisticated supply chain attacks on widely used open-source NPM packages, leveraging advanced social engineering, evolving malware techniques, and generative AI to compromise thousands of downstream environments and evade both human and AI-driven defenses.