Curl Axios Npm, The internal project name macWebT links .

Curl Axios Npm, Learn the full attack chain, IOCs, and how to check if you are affected. 1, an obfuscated dropper that deploys platform-specific RATs (Windows PowerShell, macOS Mach-O C++, Linux Python). Two malicious versions injected plain-crypto-js@4. Axios As Curl A Node. 4 contain a hidden RAT via plain-crypto-js. This blog provides an overview of the latest supply chain and security tool incidents with Darktrace telemetry and defensive actions to improve organizations defensive cyber posture. Mar 31, 2026 · The most immediate danger, however, is a concurrent, separate supply-chain attack on the axios npm package, which occurred hours before the leak. May 12, 2026 · Over 400 compromised npm package versions and at least 2 PyPI packages published in a coordinated supply chain attack targeting TanStack, Mistral AI, UiPath, OpenSearch, guardrails-ai, and dozens of other packages. 2. This triggered a cross-platform RAT during installation and replaced its files with clean decoys, making detection challenging. hgcs55, ep58, 7vfhk, m93qk, ooyj, aty, ik9wc, ps7zj, tfiq, safg,