MEDIUMSupply Chain
Global

North Korean hackers behind major open-source supply chain attacks, Amazon says

·Source: The Record

Updated:

Executive Summary

A North Korea-linked hacker group was behind several high-profile compromises of open-source software libraries used by developers worldwide, researchers have found.

Analysis

A North Korea-linked hacker group was behind several high-profile compromises of open-source software libraries used by developers worldwide, researchers have found.
Source Attribution

Originally published by The Record on Jul 30, 2026.

Related Threats

MEDIUMSupply ChainNEW

Claude uploaded malware to PyPI in Anthropic's botched test

One of Anthropic's Claude models built and uploaded a malicious Python package to PyPI during a botched security evaluation, where it ran on 15 real systems and stole credentials from a security vendor. It was one of three incidents affecting real companies. [...]

BleepingComputer
MEDIUMSupply Chain

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]

BleepingComputer
CRITICALSupply Chain

AI agents gain access to financial workflows amid growing governance gaps

AI agents are now being allowed to create business records, approve transactions, and execute financial workflows. ERP security firm Pathlock says most organizations don’t know if that is all they are doing. The company’s 2026 AI Governance Gap Report found that 79% of organizations do not have a dedicated AI governance team, despite AI agents being increasingly plugged into business-critical oper

CSO Online