Back Thehackernews

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

Thehackernews •[email protected] (The Hacker News) • April 1, 2026

New 2026 Ponemon research reveals where mature identity programs still fall short and what leading organizations are doing to close the gap.

AI agents need identity, but most teams are still figuring out how to implement it. This session cuts through the noise with a practical, production-ready framework.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Group UNC1069 Behind Axios npm Supply Chain Attack On March 31, 2026, a supply chain attack targeting the Axios npm package was attributed to the North Korean cyber group UNC1069. This attack exploited vulnerabilities in the software supply chain, affecting numerous developers and organizations reliant on Axios for their applications. The attack's scope is significant, as it potentially compromises the integrity of software used widely across various sectors. The specific attack vector and tools used by UNC1069 have not been detailed in the articles. Current assessments indicate heightened alertness among organizations using Axios, with ongoing investigations into the full impact of the breach. As of April 1, 2026, Google has confirmed the attribution to UNC1069, emphasizing the need for enhanced security measures in software supply chains. The incident highlights the persistent threat posed by state-sponsored actors in the cybersecurity landscape. 5 sources 74

Extracted Entities

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Companies (1)

Tools (1)