Sapphire Sleet: North Korean Threat Actor Behind Supply Chain Attacks

Microsoft assesses with high confidence that the Mastra npm compromise is attributable to Sapphire Sleet, a North Korean threat actor known for targeting software supply chains. The group's tactics include publishing malicious packages to public repositories to compromise developer environments.