Forty-five million weekly downloads. One compromised maintainer. Three hours of exposure before anyone noticed.

Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.

Spread the loveIn a significant security incident that has sent shockwaves through the developer community, a North Korean state-sponsored hacking group has successfully compromised the popular Axios ...

Discover the details of the North Korean hack on Axios software. We explain how the UNC1069 group is stealing US ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

A cyberattack on a US corporation illustrates how state-aligned hackers operate, and how damage in war today isn’t always ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

Spread the loveIn a worrying development for the cybersecurity landscape, North Korean hackers have successfully infiltrated the widely-used Axios NPM package, introducing backdoored versions of the ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s ...

Hackers linked to North Korea are suspected of an ambitious attack on an inconspicuous but widely used software package, ...