Threat actor
STARDUST CHOLLIMA
Malpedia aka Sapphire Sleet
Tracked by CyberSIXT since Apr 1, 2026 · last activity Aug 21, 2026
Coverage timeline
-
North Korean hackers breach Rust supply chain via crate arrayrefwww.securityweek.com · Aug 21, 2026
-
UK Education Dept Breach Exposes 607k Records After NPM Attackwww.securityweek.com · Jul 31, 2026
-
North Korea's Sapphire Sleet hijacks npm packages via Amazon linksthehackernews.com · Jul 30, 2026
-
North Korean hackers breach Mastra via tainted npm packageswww.infosecurity-magazine.com · Jun 22, 2026
-
North Korean Group Targets NPM Supply Chain, 8M Devs at Riskwww.securityweek.com · Jun 22, 2026
-
North Korean hackers use AppleScript, ClickFix on macOS financewww.securityweek.com · Apr 22, 2026
-
Mitigating the Axios npm supply chain compromisewww.microsoft.com · Apr 1, 2026