Threat actor
STARDUST CHOLLIMA
Malpedia aka Sapphire Sleet
Tracked by CyberSIXT since Apr 1, 2026 · last activity Jun 22, 2026
Linked incidents
Coverage timeline
-
North Korean hackers breach Mastra via tainted npm packageswww.infosecurity-magazine.com · Jun 22, 2026
-
North Korean Group Targets NPM Supply Chain, 8M Devs at Riskwww.securityweek.com · Jun 22, 2026
-
North Korean hackers use AppleScript, ClickFix on macOS financewww.securityweek.com · Apr 22, 2026
-
Mitigating the Axios npm supply chain compromisewww.microsoft.com · Apr 1, 2026