North Korean Hackers Poisoned 140+ npm Packages in an AI Dev Tooling Attack. Here's What Would Have Caught It.

The Incident Microsoft's threat intelligence team has attributed a supply chain attack targeting the Mastra AI ecosystem to Sapphire Sleet (also tracked as BlueNoroff), a North Korean state-sponsored hacking group. The attackers compromised over 140 npm packages — not obscure, one-download throwaway

Related Stories

📰

Cloud AI Learners Grade Themselves with Automated Passport Layer Assessments

Exposed Sentry key enables takeover of Claude Code, Cursor, and Codex

📰

I Built an Autonomous AI Security Brain for Linux Servers (It Actually Responds, Not Just Alerts)

📰

Navigating Azure AZ-900: Lessons from a Cloud Journey for Newbies