indicatornpm_package
axios
- First seen
- 2026-05-18
- Last seen
- 2026-06-10
- Sightings
- 3
Posts referencing this indicator
- CrowdStrike 2026 Technology Threat Landscape Report: China’s Ambitions Fuel Attacks
Legitimate npm package compromised by STARDUST CHOLLIMA to poison open-source supply chains.
- ESET APT Activity Report Q4 2025–Q1 2026
Compromised by the Lazarus group during Operation DangerousPassword to inject trojanized code into downstream applications.
- IT threat evolution in Q1 2026. Non-mobile statistics
Widely used HTTP client for JavaScript targeted in a supply chain attack to deploy a backdoor on macOS devices.