North Korea-Linked Hackers Behind Axios Compromise

A widely used open-source software project, Axios, was briefly compromised in a cyberattack linked to suspected North Korean hackers, exposing thousands of systems to potential data theft. The breach occurred on March 31 and followed a weeks-long social engineering campaign targeting the project’s maintainer, Jason Saayman, according to details shared in a post-incident review. The […]

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

itsecuritynews.info - 03/Apr 12:36

The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering...

Axios Compromise on npm Introduces Hidden Malicious Package

itsecuritynews.info - 31/Mar 21:09

A newly discovered software supply chain attack targeting the npm ecosystem briefly compromised one of the most widely used JavaScript libraries in...

Axios Compromise on npm Introduces Hidden Malicious Package

itsecuritynews.info - 31/Mar 21:09

A newly discovered software supply chain attack targeting the npm ecosystem briefly compromised one of the most widely used JavaScript libraries in...

Google links Axios npm supply chain attack to North Korea-linked APT UNC1069

securityaffairs.co - 01/Apr 13:47

Google links the Axios npm supply chain attack to North Korean threat group UNC1069, targeting financial gain. Google has attributed the recent Axios...

Axios npm hack used fake Teams error fix to hijack maintainer account

bleepingcomputer.com - 04/Apr 20:30

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social...

Axios npm hack used fake Teams error fix to hijack maintainer account

bleepingcomputer.com - 04/Apr 20:30

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social...

Drift Protocol Hit in $286M Suspected North Korea-Linked Crypto Heist

itsecuritynews.info - 06/Apr 13:16

Hackers have stolen approximately $286 million from Drift Protocol, a leading decentralized perpetual futures exchange on the Solana blockchain, in...