Axios Npm Compromise — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 17, 2026
Last Seen
June 17, 2026

Related Threat Clusters

  • Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages

    A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…

    753 articles · Updated April 29, 2026

Recent Intelligence Reports

  • A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope — Snyk · June 17, 2026
  • A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope — Snyk · June 17, 2026

Related Entities

BlueNoroff Sapphire Sleet Malware Supply Chain Attack Shai-Hulud NPM Attack Mastra Mini Shai-Hulud T1027 - Obfuscated Files Or Information T1041 - Exfiltration Over C2 Channel T1053 - Scheduled Task/Job T1059.001 - PowerShell T1059.007 - JavaScript

CVSS v3.1 Breakdown