AI Cyber Threats & Nation-State Actors
AI Cyber Threats & Nation-State Actors
Articles on nation-state cyber operations targeting AI infrastructure, supply chain compromises, and adversarial AI campaigns by state-sponsored groups.
ai cyber threats nation state actorsJun 29, 20263 min
North Korean-Linked Sapphire Sleet Targets Mastra AI in Extensive npm Supply Chain Attack
An analysis of the Sapphire Sleet compromise targeting Mastra AI, examining how the North Korean threat actor hijacked npm maintainer accounts to deploy cross-platform stealer payloads.
ai cyber threats nation state actorsJun 29, 20265 min
Sapphire Sleet Weaponized npm to Poison AI Toolchains — and You’re Still Installing Packages Without Checking
Microsoft attributes the Mastra AI supply chain attack to Sapphire Sleet — a North Korean group that turned npm into a silent crypto theft pipeline by hijacking a maintainer account and injecting malicious dependencies into 140 packages.