Engineering

Axios Supply Chain Attack: How North Korean Hackers Social-Engineered an Open Source Maintainer

A fake Slack workspace, a cloned company founder, and a Teams meeting that installed a RAT. The axios npm compromise is a masterclass in social engineering.