A devastating series of open-source software supply chain attacks has been linked by Amazon to North Korean hackers, who exploited vulnerabilities in widely used packages on the Node Package Manager (npm) ecosystem. The cloud computing giant has attributed multiple high-profile compromises, including those affecting popular libraries like Debug, Chalk, and Axios, to a single threat actor known as Sapphire Sleet.
The attacks, which began with a compromised typo-crypto package in March 2025, demonstrate the sophistication and audacity of modern supply chain threats. The attackers gained access by socially engineering package maintainers, then published malicious updates that were automatically distributed to unsuspecting users. This tactic allows them to reach a large pool of potential downstream victims at once, making it a lucrative financial motivation.
The most recent attack targeting Axios in March 2026 was already attributed to DPRK-linked actors, but Amazon’s investigation has connected it to the earlier package compromises. The attribution is based on shared tactics, techniques, and procedures (TTPs) observed in the campaign, as well as command-and-control infrastructure and operational similarities.
Amazon’s analysis highlights several disturbing trends that have emerged from these recent supply chain attacks: attackers are increasingly using AI-generated code, documentation, and maintainer identities to build trust before introducing malicious functionality. They’re also splitting malicious functionality across multiple seemingly benign packages, making detection more difficult. Furthermore, malware is using stronger encryption and multi-stage payloads, which hinder static analysis.
The Amazon report emphasizes that threat actors are exploiting the use of “slopsquatting” – registering package names hallucinated by AI coding assistants in hopes that developers or autonomous coding agents will install them. This tactic allows attackers to evade detection and gain access to sensitive systems. Many of these tactics are enhanced and simplified by AI, which helps attackers generate code, documentation, and maintainer identities.
In response to these dangers, Amazon is investing $12.5M in the Akrites initiative, which aims to protect critical open-source software from AI-enabled attacks. The company is also collaborating with industry partners like OpenSSF and reporting its findings and intelligence to the community.
The recent supply chain attacks demonstrate the importance of robust security measures and ongoing vigilance. As Amazon’s analysis shows, attackers are becoming increasingly sophisticated in their tactics and techniques. To stay ahead of these threats, it’s essential for developers and security teams to prioritize testing every layer of their systems before attackers do. By doing so, they can prevent breaches and ensure the integrity of their open-source software supply chains.
Practically speaking, this means that developers should adopt a “test everything” approach, simulating real-world scenarios and threat vectors in a controlled environment. This proactive approach can help identify vulnerabilities and prevent attacks before they occur. By staying informed about emerging threats and trends, security teams can develop effective countermeasures to protect their systems from AI-enabled supply chain attacks.
Source: Bleeping Computer — 2026-07-30