⚠️ Google links the Axios npm compromise to North Korean group UNC1069.

Attackers hijacked the maintainer account and pushed malicious versions that executed during install via a hidden dependency, deploying a cross-platform backdoor (Windows, macOS, Linux) and then removing traces.

�� Read → https://thehackernews.com/2026/04/google-attributes-axios-npm-supply.html