Pattern: State-Sponsored Actors Now Target AI Developer Toolchain — npm Ecosystem, MCP Configs, and IDE Extensions Under Active Threat

Google Cloud / Microsoft / Elastic·high signal

The intersection of nation-state operations and developer tooling has reached a new phase. In one week: North Korea's Sapphire Sleet compromised axios (100M weekly downloads) via social engineering of a maintainer, Microsoft patched a command injection in VS Code's MCP configuration handling, and Azure's MCP Server shipped without authentication entirely. The developer toolchain — package managers, editor configs, agent protocols — is now an active target for state-level actors, not just opportunistic attackers. Builder-level implication: every MCP server you install, every npm dependency you add, and every editor config file you open is now part of your threat model.