North Korean hackers behind major open-source supply chain attacks, Amazon says

Researchers have discovered that a hacker group linked to North Korea was responsible for several notable compromises of open-source software libraries. These libraries are widely used by developers around the world. Amazon made this finding public, attributing the attacks to the North Korean group. The compromises targeted open-source software, which is used globally. The discovery highlights the group's involvement in significant supply chain attacks.