source_3885.pdf (54 MB)

CrowdStrike attributes the poisoning of 131 AI framework packages to the North Korea-linked STARDUST CHOLLIMA adversary, demonstrating an effort to compromise trusted components upstream in the developer ecosystem. Such poisoned dependencies can provide a launchpad for downstream and cross-domain compromise. The broader hunting data also shows adversaries accelerating exploitation with AI and abusing trusted identities, cloud services, and software supply chains.