Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069
The Hacker News | #1 Trusted Source for Cybersecurity News [Uno…
April 1, 2026
Google has formally attributed the supply chain compromise of the popular Axios npm package to a financially motivated North Korean threat activity cluster tracked as UNC1069.
"We have attributed the attack to a suspected North Korean threat actor we track as UNC1069," John Hultquist, chief analyst at Google Threat Intelligence Group (GTIG), told The Hacker News in a statement.
"North Korean
Discussion in the ATmosphere