Skip to content
Threat Feed

Actor

UNC1069

1 brief RSS
critical threat

Axios npm Package Compromised via Social Engineering

North Korean threat actors (UNC1069) compromised the Axios npm package by socially engineering a maintainer with a fake Microsoft Teams update delivering a RAT, leading to the injection of a malicious dependency and a supply chain attack.

UNC1069 supply chain attack npm social engineering rat
2r 7t