Mitigating the Axios npm supply chain compromise | Microsoft Security Blog

North Korean state actor Sapphire Sleet compromised two widely used Axios npm package versions with a malicious dependency, enabling stealthy cross-platform remote access trojans and persistent command-and-control, exemplifying the escalating risk of supply chain attacks in open-source software.