Supply-Chain Compromise of axios npm Package

A coordinated supply chain attack targeted the axios npm package, compromising two versions (1.14.1 and 0.30.4) by injecting a malicious dependency. The attack delivered a cross-platform Remote Access Trojan to macOS, Windows, and Linux systems. The compromise occurred through the lead maintainer's npm account, bypassing normal publishing workflows. The malicious payload performed system reconnaissance, established persistence on Windows, and provided remote access capabilities. The attack affected numerous organizations and potentially exposed sensitive credentials. Immediate mitigation steps include pinning to safe versions, removing malicious dependencies, rotating credentials, and blocking the command and control server.

• $2 Million+ Drained From Polymarket Traders in New Supply Chain AttackNews2026-10-30
• Fake "View & Sign" and Adobe Acrobat Lures Deliver Attacker-Configured ScreenConnect ClientsMalware2026-10-29
• Applying Security by Design and Cyber Immunity principles to protect AI systems | Kaspersky official blogAnalysis2026-10-29
• Inside ICMacOS: From an Infostealer to a Persistent RATMalware2026-10-27
• Lunex Unmasked: A New Information Stealer Deployed Through BYOVDMalware2026-09-26