Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
3 matching stories
Supply-ChainPalo Alto Unit 42 Breaks Down ChainDrop: Self-Propagating npm Worm Infects 400+ Packages
Palo Alto Networks Unit 42 published a research report on the ChainDrop npm worm, a self-propagating supply-chain attack that compromised 400+ packages including keyv and cacheable-request by trojanizing the maintainer's monorepo and using stolen credentials to backdoor all co-owned packages.
Amazon Threat Intelligence attributes NPM supply chain compromises to North Korea's Sapphire Sleet
Amazon Threat Intelligence publicly attributes recent NPM open-source supply chain compromises to the North Korean threat actor tracked as Sapphire Sleet, based on C2 indicators and TTPs with medium confidence.
TeamPCP Drops New Malware into 42 Microsoft GitHub Repositories
TeamPCP leveraged a stolen GitHub account to publish malicious code into at least 42 repositories and 236 branches spanning the Azure, Azure-Samples, and Microsoft GitHub organizations, extending its ongoing supply-chain campaign against Microsoft-linked projects.
