Veracode blog (incl. migrated Phylum research posts)
npm package-pair attack attributed to Jade Sleet (in Q2 2023 Evolution of Software Supply Chain Security Report) · 2023-07-25T20:55:00+00:00
Packages published to NPM by this threat group served as a launching point for further attacks against organizations tied to cryptocurrency and blockchain technologies, which aligns with the expected behaviors of the Jade Sleet group.