# axios-npm-supply-chain-attack-north-korean-rat-via-ai-agent-auto-install: Axios npm Supply Chain Attack: North Korean RAT via AI Agent Auto-Install

> Axios npm Supply Chain Attack: North Korean RAT via AI Agent Auto-Install is a critical-severity supply chain compromise issue in axios, a package. Affected: >=1.8.1 <1.8.3. Fixed in 1.8.3.

- **Canonical URL:** https://catalog.anomity.ai/vuln/axios-npm-supply-chain-attack-north-korean-rat-via-ai-agent-auto-install
- **Aliases:** ti-001
- **Severity:** critical
- **Attack type:** Supply chain compromise
- **Component:** axios (package)
- **Package:** axios (npm)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-04-01
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/axios-npm-supply-chain-attack-north-korean-rat-via-ai-agent-auto-install

## Summary

UNC1069 (North Korea-nexus) compromised the Axios npm maintainer's credentials and published two backdoored releases containing a phantom dependency that dropped a cross-platform RAT on macOS, Windows, and Linux. The attack specifically exploited AI coding agents (Claude Code, Cursor, GitHub Copilot Workspace) which autonomously run npm install without human confirmation, creating an estimated 179-minute silent compromise window before detection.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| >=1.8.1 <1.8.3 | 1.8.3 |

## Am I affected by this vulnerability?

You are affected if you run axios >=1.8.1 <1.8.3. Versions 1.8.3 and later include the fix.

## How do I fix it?

Pin Axios to 1.8.0 or upgrade to 1.8.3+. Audit node_modules for the phantom dependency 'axiosproxy'. Block autonomous npm install in CI policies. Scan for RAT C2 indicators (see Microsoft blog for IOCs).

## References

- article: https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/

## Related vulnerabilities

- [litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook](https://catalog.anomity.ai/vuln/litellm-1-107-0-compromised-on-pypi-and-docker-a-cook-pth-startup-hook) — critical
- [memtensor-compromise-poisoned-openclaw-memory-plugin-and-memoryos](https://catalog.anomity.ai/vuln/memtensor-compromise-poisoned-openclaw-memory-plugin-and-memoryos) — critical
- [mastra-npm-packages-trojanized-via-maintainer-account-compromise](https://catalog.anomity.ai/vuln/mastra-npm-packages-trojanized-via-maintainer-account-compromise) — high
- [atomic-arch-aur-npm-supply-chain-compromise-atomic-lockfile](https://catalog.anomity.ai/vuln/atomic-arch-aur-npm-supply-chain-compromise-atomic-lockfile) — high
- [miasma-npm-worm-compromises-31-red-hat-cloud-services-packages-via-ci](https://catalog.anomity.ai/vuln/miasma-npm-worm-compromises-31-red-hat-cloud-services-packages-via-ci) — critical
- [mistralai-pypi-package-v2-4-6-backdoored-with-credential-stealer](https://catalog.anomity.ai/vuln/mistralai-pypi-package-v2-4-6-backdoored-with-credential-stealer) — critical

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=axios-npm-supply-chain-attack-north-korean-rat-via-ai-agent-auto-install