#axios-npm-attack

North Korea's UNC1069 Turns Axios into a Global Backdoor Dropper

Imagine installing a routine NPM update—and unwittingly inviting North Korean hackers into your machine. That's exactly what UNC1069 did to Axios, the HTTP kingpin with 100M+ weekly downloads.

North Korea's UNC1069 Turns Axios NPM into Cross-Platform Trapdoor

Google's just named North Korea's UNC1069 as the crew behind the Axios npm hijack. It's a slick supply chain play, dropping cross-platform backdoors on devs worldwide.