{
  "entry": {
    "kind": "vuln",
    "slug": "axios-npm-supply-chain-attack-north-korean-rat-via-ai-agent-auto-install",
    "name": "axios-npm-supply-chain-attack-north-korean-rat-via-ai-agent-auto-install",
    "vendor": "axios",
    "description": "UNC1069 (North Korea-nexus) compromised the Axios npm maintainer's credentials and published two backdoored releases containing a phantom dependency that dropped a cross-platform RAT on macOS, Windows, and Linux. The attack specifically exploited AI coding agents (Claude Code, Cursor, GitHub Copilot Workspace) which autonomously run npm install without human confirmation, creating an estimated 179-minute silent compromise window before detection.",
    "website": "https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "advisory",
    "capabilities": [],
    "packaging": {
      "manager": "npm",
      "packageName": "axios",
      "command": null
    },
    "configFiles": null,
    "category": "package",
    "updatedAt": "2026-04-01",
    "risk": {
      "score": 90,
      "band": "critical",
      "signals": [],
      "dangerousCombos": []
    },
    "dangerousCombos": [],
    "vuln": {
      "id": "axios-npm-supply-chain-attack-north-korean-rat-via-ai-agent-auto-install",
      "aliases": [
        "ti-001"
      ],
      "title": "Axios npm Supply Chain Attack: North Korean RAT via AI Agent Auto-Install",
      "summary": "UNC1069 (North Korea-nexus) compromised the Axios npm maintainer's credentials and published two backdoored releases containing a phantom dependency that dropped a cross-platform RAT on macOS, Windows, and Linux. The attack specifically exploited AI coding agents (Claude Code, Cursor, GitHub Copilot Workspace) which autonomously run npm install without human confirmation, creating an estimated 179-minute silent compromise window before detection.",
      "severity": "critical",
      "cvss": {
        "score": null,
        "vector": null,
        "version": null
      },
      "cwe": [],
      "attackType": [
        "Supply chain compromise"
      ],
      "componentType": "package",
      "component": {
        "name": "axios",
        "vendor": null,
        "package": "axios",
        "ecosystem": "npm",
        "catalogSlug": null
      },
      "affected": [
        {
          "range": ">=1.8.1 <1.8.3",
          "fixed": "1.8.3"
        }
      ],
      "exploited": false,
      "exploitPublic": false,
      "publishedAt": "2026-04-01",
      "modifiedAt": "2026-04-01",
      "lastVerified": "2026-11-01",
      "references": [
        {
          "type": "article",
          "url": "https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/"
        }
      ],
      "mitigation": "Pin Axios to 1.8.0 or upgrade to 1.8.3+. Audit node_modules for the phantom dependency 'axiosproxy'. Block autonomous npm install in CI policies. Scan for RAT C2 indicators (see Microsoft blog for IOCs).",
      "detectedByAnomity": false
    }
  }
}