Google Threat Intelligence Group warns of active supply chain attack on npm’s Axios library Malicious dependency ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.