One of our researchers built an AI powered supply chain monitoring tool on a Friday afternoon. T...

Summary

Elastic Security Labs developed an AI-powered supply chain monitoring tool that successfully detected the Axios npm package compromise on its first week of operation. The tool, built during a Friday afternoon development session, identified the malicious activity the following Monday night before widespread awareness. Elastic is now open-sourcing the tool to help the broader security community detect similar supply chain attacks.

Indicators of Compromise

• malware — Axios npm compromise

Entities