New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known.

New findings connect the same Pyongyang-backed group to four compromises dating to 2025, revealing a larger operation than previously known.

Researchers say Sapphire Sleet socially engineered maintainers before publishing malicious updates through trusted accounts