Amazon warns AI is giving North Korean hackers a dangerous advantage
… Attackers exploit trust to compromise widely used packages In March 2025, the threat actor compromised the typo-crypto package through a trojanized file disguised as a legitimate dependency. The same group later compromised debug and chalk in September 2025, then axios in March 2026. …