Veracode blog (incl. migrated Phylum research posts)
North Korean open-source ecosystem attacks (in 2025 Software Supply Chain Security Trends & Predictions) · 2024-11-20T20:03:41+00:00
It’s been about a year since we identified the first nation-state attack, executed by North Korea, in the open-source ecosystem. This method of software supply chain attacks is particularly effective at meeting their goals of bypassing sanctions. At this point, North Korean actors have stolen an estimated $4 billion from financial and cryptocurrency groups.