A supply chain compromise involving the widely used JavaScript package Axios is now being tied to a North Korea-linked threat actor, turning what already looked like a serious open-source incident into a much bigger security story. Google Threat Intelligence Group said the attack targeted the official Axios package on npm and attributed the activity to […]

The post Google Says North Korea Was Behind the Axios npm Supply Chain Attack appeared first on Centraleyes.

The post Google Says North Korea Was Behind the Axios npm Supply Chain Attack appeared first on Security Boulevard.

Rebecca Kappel

Source: Security Boulevard
Source Link: https://securityboulevard.com/2026/04/google-says-north-korea-was-behind-the-axios-npm-supply-chain-attack/