hxxp://sfrclak[[.]]com:8000/6202033

Posts referencing this indicator

• Supply Chain Attack on Axios Pulls Malicious Dependency from npm

  Socket

  C2 URL used to fetch platform-specific payloads.

  2026-05-13
• Mitigating the Axios npm supply chain compromise

  Microsoft

  Endpoint used by the first-stage loader to fetch OS-specific RAT payloads.

  2026-05-13
• Elastic releases detections for the Axios supply chain compromise

  Elastic Security Labs

  C2 URL used to fetch the second-stage payloads.

  2026-05-13
• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  Mandiant

  WAVESHAPER.V2 payload delivery URL

  2026-05-13