#DPRK

Inside the npm Supply-Chain Attacks Targeting AI Coding Tools

The slopsquatting threat. An investigation into DPRK-linked npm attacks, AI hallucinated package names, and self-replicating worms compromising CI/CD pipelines.