The Axios npm Supply Chain Compromise: A North Korean APT's Bold Move
On March 31, 2026, the North Korean state actor Sapphire Sleet compromised Axios npm packages, injecting malware that deployed RATs on developer machines worldwide. Here's what happened and how to stay safe.