Axios npm Supply Chain Attack: Cross-Platform RAT Delivery via Compromised Maintainer Credentials

A threat actor hijacked the npm credentials of Axios’s maintainer to surreptitiously publish malicious versions that delivered a cross-platform remote access trojan to millions of potential downstream users, exploiting systemic weaknesses in npm’s authentication and dependency trust model.