Observed Signal · Apr 6, 2026 · Security Incident · Source: techcrunch · Impact: 3/5 · Sentiment: Negative
North Korea Hijacked Widely Used Axios Library
A suspected North Korean cyber campaign briefly hijacked the popular open-source Axios library on March 31 by targeting its maintainer through a weeks-long social engineering operation. Hackers built trust using a fake company persona and Slack workspace, then convinced maintainer Jason Saayman to join a meeting and install malware that granted remote access. The attackers published two malicious Axios packages that were removed about three hours later; the full scope of infections is still unclear, but any machine installing the compromised packages could have exposed private keys, credentials and passwords. Security researchers say the technique mimicked earlier North Korean-attributed attacks. The incident highlights risks in open-source software supply chains and the incentives for nation-state actors to target widely used developer tools.
A supply-chain compromise of a widely used open-source library can affect large numbers of developer projects and downstream systems; it underscores systemic infrastructure and security risks relevant to any tech-dependent industry, including AdTech.
Track Google Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- The Axios project was hijacked on March 31 when two malicious packages were published and removed roughly three hours later.
- Attackers targeted Axios maintainer Jason Saayman via a multi-week social engineering campaign that used a fake company, Slack workspace and realistic profiles.
- The hackers obtained remote access after tricking Saayman into downloading malware disguised as an update during a web meeting.
- Machines that installed the malicious Axios packages may have had private keys, credentials and passwords stolen.
- Security researchers and Saayman say the attack mimicked techniques previously attributed to North Korean hacking groups, who were blamed for stealing at least $2 billion in cryptocurrency in 2025.
Connected Companies & Entities
1 Entity mappedOntology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
North Korean Hackers Hijack Axios to Push Malware
A suspected North Korean threat actor hijacked the popular open-source JavaScript library Axios on npm, pushing malicious versions that delivered a remote access trojan (RAT) for Windows, macOS and Linux. Security firm StepSecurity detected and helped stop the compromise after roughly three hours; Aikido warned that anyone who downloaded the affected package should assume compromise. Google’s Threat Intelligence Group attributed the attack to a suspected North Korean actor tracked as UNC1069, with John Hultquist (Google TIG) publicly commenting on the attribution. The attacker gained access by compromising a primary maintainer’s account, replacing the developer email and publishing legitimate-looking updates; the malware included self-deletion features to evade detection. The full scope and number of victims remain unclear.
Axios npm Package Hijacked to Install Backdoor
A malicious supply-chain attack compromised a maintainer account for the widely used Axios npm package, adding a new dependency (plain-crypto-js) whose postinstall script downloaded and executed a remote-access trojan before self-deleting. The article frames this incident as part of a broader acceleration of automated, ecosystem-scale supply-chain attacks enabled by autonomous AI coding agents that install dependencies at machine speed. It describes a related campaign called TeamPCP that began by stealing a Trivy CI token, led to a self-propagating CanisterWorm across 66+ npm packages, and cascaded into Docker Hub, PyPI and the VS Code extension marketplace. Behavioral detection (e.g., Socket) that inspects package actions rather than CVE databases can detect novel malicious packages quickly; Socket detected the suspicious dependency in minutes, while the compromised Axios versions remained live for about three hours before removal. The piece warns that AI agents selecting and installing dependencies autonomously expands the attack surface and compresses the window for human review.
North Korean Hackers Poisoned 140+ npm Packages
Microsoft attributed a supply-chain attack on the Mastra AI ecosystem to Sapphire Sleet (also tracked as BlueNoroff), in which attackers poisoned over 140 npm packages that AI coding assistants and developer tooling actively surface. The incident is notable because LLM-backed IDE assistants (e.g., Copilot, Cursor) can suggest or auto-install dependencies, allowing malicious code to reach developer machines without traditional phishing. Microsoft’s public details are limited: a state-level actor, 140+ contaminated packages, and a focus on AI-assisted development workflows. The article highlights detection gaps—npm audit relies on published CVEs, lockfiles help only post-install, and LLMs do not validate package provenance—and describes Sentinel’s SlopScan integration as a defensive pattern that extracts package names from LLM output and flags or blocks suspicious packages before installation. Publication date: 2026-06-20.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.