North Korean Hackers Poisoned Axios for 2 Hours. Every Developer Should Be Scared.
On March 31, North Korean-linked hackers hijacked the Axios npm package — used by 100 million developers weekly — and deployed a cross-platform backdoor for 2–3 hours before anyone noticed. Here is the technical breakdown of an attack that exposed every CI/CD pipeline in the world.


