Amazon links four poisoned npm packages to one North Korean crew
AI disclosure
Summary
Researchers say Sapphire Sleet socially engineered maintainers before publishing malicious updates through trusted accounts