North Korean Hackers Fake a Company to Pwn Axios Maintainer – RAT in 100M Downloads
Picture this: a Teams call with 'colleagues' from a polished fake company. One 'update' click later, North Koreans control your machine and poison a library with 100 million downloads. Open source just got conned.
⚡ Key Takeaways
- North Koreans used pro-level social engineering: fake Slack/Teams/company to RAT an axios maintainer.
- npm lacks OIDC enforcement; 2FA useless against full machine control.
- Scanners caught it fast, but 3 hours exposed millions—verify provenance always.
Worth sharing?
Get the best Developer Tools stories of the week in your inbox — no noise, no spam.
Originally reported by dev.to
