North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack | Google Cloud Blog

A North Korea-linked threat actor compromised the widely used Axios NPM package in a sophisticated supply chain attack, deploying a multi-platform backdoor that puts millions of systems and downstream dependencies at risk of credential theft, ransomware, and further software supply chain compromises.