Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
NPMPalo Alto Unit 42 Breaks Down ChainDrop: Self-Propagating npm Worm Infects 400+ Packages
Palo Alto Networks Unit 42 published a research report on the ChainDrop npm worm, a self-propagating supply-chain attack that compromised 400+ packages including keyv and cacheable-request by trojanizing the maintainer's monorepo and using stolen credentials to backdoor all co-owned packages.
Amazon Threat Intelligence attributes NPM supply chain compromises to North Korea's Sapphire Sleet
Amazon Threat Intelligence publicly attributes recent NPM open-source supply chain compromises to the North Korean threat actor tracked as Sapphire Sleet, based on C2 indicators and TTPs with medium confidence.
