INCIDENT EVIDENCE GRAPH

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

2026-07-30T18:13:24Z

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. [...]

• Victim: The Node Package Manager (npm) ecosystem
• Actor: North Korean hackers
• Method: Supply-chain attacks targeting the npm ecosystem

Primary evidence

1. Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

中文