Aikido Security blog (4)
| Date (as written) | Incident | Country | Actors |
|---|---|---|---|
| Mar 31, 2025 | ByBit theft (mentioned in "Malware hiding in plain sight") | Lazarus | |
| Jun 12, 2025 | North Korean Crypto-Heist Targets Web3 Developers via Malicious NPM Package (web3-wrapper-ethers) | Void Dokkaebi | |
| 2026-08 | arrayref | Sapphire Sleet | |
| Aug 24, 2026 | Axios npm compromise by Sapphire Sleet (in "Shai-Hulud was the best thing to happen to supply chain security") | Sapphire Sleet (North Korea) |