North Korea-Linked Hackers Compromise Axios npm Package in Major Supply Chain Attack

A North Korea-linked threat group has successfully hijacked one of the most widely used JavaScript libraries on the internet, injecting malware into millions of potential development environments. On March 31, 2026, attackers gained access to the Axios Node Package Manager (npm) package using stolen maintainer credentials, turning a trusted tool into a weapon against unsuspecting […]

The post North Korea-Linked Hackers Compromise Axios npm Package in Major Supply Chain Attack appeared first on Cyber Security News.