Advertisement
SU
CRITICAL
Supply Chain
North Korean Sapphire Sleet Compromises 140+ Mastra AI npm Packages
Microsoft attributes the Mastra AI supply chain attack to Sapphire Sleet (BlueNoroff), involving 140+ malicious npm packages targeting AI developers.
Runtime Rebel Intel
3 min read·Jun 20, 2026
HIGH
Threat Intel
Sapphire Sleet's ClickFix: North Korea Targets macOS Users
North Korea-backed Sapphire Sleet is deploying ClickFix malware via fake job offers and phony Zoom updates to steal macOS user credentials and data. Learn how to detect
Runtime Rebel Intel
4 min read·Apr 16, 2026