⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More

Summary: North Korean-linked actors took over the npm account of Axios's lead maintainer and pushed malicious versions of the package, which has nearly 100 million weekly downloads, carrying cross-platform malware called WAVESHAPER.V2; the activity is attributed to financially motivated threat actor UNC1069. The malicious versions were available for only a few hours, and the malware included self-deleting anti-forensic cleanup.
Why it matters: Axios is so deeply embedded in enterprise applications that organizations may have pulled the compromised code into their environments through build pipelines or downstream dependencies without ever choosing to install it themselves, which makes the exposure hard to spot and contain.

Read the original at The Hacker News ↗