[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPP7oZTGGN0OSSl_Vk70P50KYZZr5edzshWKchvlPQck":3},{"article":4,"iocs":37,"watch_terms":41},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":21},"de8546a7-c6b7-43e7-be4c-220059e9914c","Key takeaways:\n- A compromised npm maintainer account was used to publish two malicious versions...","key-takeaways-a-compromised-npm-maintainer-account-was-used-to-publish-two-malic","Key takeaways:\n- A compromised npm maintainer account was used to publish two malicious versions of the widely used Axios HTTP client\n- The malicious JavaScript deploys platform-specific stage-2 implants for macOS, Windows, and Linux\n- All three stage-2 payloads are","A threat actor compromised an npm maintainer account and published two malicious versions of the popular Axios HTTP client library. The malicious JavaScript code deployed platform-specific stage-2 implants targeting macOS, Windows, and Linux systems, affecting potentially thousands of downstream dependencies relying on Axios.","Compromised npm maintainer published malicious Axios versions with multi-platform implants.",null,"https:\u002F\u002Fx.com\u002Felasticseclabs\u002Fstatus\u002F2039025598383735131","2026-03-31T17:02:40+00:00","2026-03-31T18:00:17.696455+00:00",9,[],"26b0b636-0e31-4db1-bffb-61bdf9f20a58",{"id":17,"icon":11,"name":19,"slug":20},"Supply Chain","supply-chain",[22,27,32],{"category":23},{"id":24,"icon":11,"name":25,"slug":26},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":28},{"id":29,"icon":11,"name":30,"slug":31},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":33},{"id":34,"icon":11,"name":35,"slug":36},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[38],{"type":26,"value":39,"context":40},"Axios (malicious versions)","Compromised npm package with multi-stage implant deployment capability",[]]