Amazon uncovers broad North Korean hacking campaign against open-source software

A North Korea-linked hacker group has been tied to four open-source software compromises dating back to March 2025, Amazon researchers said Wednesday, significantly expanding the publicly known scope of Pyongyang’s efforts to use trusted code to reach large numbers of potential victims and gain access to companies’ systems.The assessment for the first time links the same financially-motivated hacking group to compromises of four major JavaScript packages—typo-crypto, debug, cha