North Korean threat actors linked to prior npm package compromise preceding axios hack

Amazon threat intelligence has identified a link between a previously obscure npm package compromise and the subsequent attack on axios, attributing both to the same North Korean state-sponsored group. This discovery confirms a pattern of using smaller, initial software supply chain breaches as a testing ground for more significant operations.