<description>&lt;p&gt;Dennis and Lindsey dig into what we know do far about the supply chain attack on the axios NPM package, including how the attacker gained access to the maintainer&amp;#39;s account, the window of exposure for the malicious packages, the behavior of the RAT that&amp;#39;s installed on victims&amp;#39; machines, and what the downstream effects may be. &lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Links&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Huntress post&lt;/strong&gt;: https://www.huntress.com/blog/supply-chain-compromise-axios-npm-package&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Socket analysis&lt;/strong&gt;: https://socket.dev/blog/axios-npm-package-compromised&lt;/p&gt;
</description>

Dennis and Lindsey dig into what we know do far about the supply chain attack on the axios NPM package, including how the attacker gained access to the maintainer&#39;s account, the window of exposure for the malicious packages, the behavior of the RAT that&#39;s installed on victims&#39; machines, and what the downstream effects may be. LinksHuntress post: https://www.huntress.com/blog/supply-chain-compromise-axios-npm-packageSocket analysis: https://socket.dev/blog/axios-npm-package-compromised

Decipher Security Podcast

Axios NPM Supply Chain Attack

Axios NPM Supply Chain Attack

Description