North Korean state-affiliated npm and PyPI attacks (in Q3 2023 Evolution of Software Supply Chain Security Report)

Veracode blog (incl. migrated Phylum research posts)

At the end of Q2 2023, Phylum was the first to uncover a series of meticulously orchestrated attacks on npm. These attacks were later attributed to North Korean state-affiliated actors by Github . These attacks continued into Q3, with campaigns against PyPI and additional attacks against npm.