STARDUST CHOLLIMA Likely Compromises Axios npm Package
STARDUST CHOLLIMA has likely compromised Axios Note Package Manager (npm) Package with stolen manager credentials. Learn more.
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack | Google Cloud Blog
A North Korea-nexus threat actor targeted the popular axios NPM package in a massive supply chain attack.
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity
Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.
The Threat Codex