DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About Privacy
Sign up
Topics
Follow your own topics →
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
Privacy Policy
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS

security: Mitigating the Axios npm supply chain compromise

· Sujith Quintelier · April 1, 2026, 11:06 p.m.
Cybersecurity npm malware supply chain security
Summary
The blog post discusses the Axios npm supply chain compromise reported by Microsoft, detailing malicious releases that exploited vulnerabilities to connect to a C2 server operated by the North Korean actor Sapphire Sleet, along with the subsequent removal of the compromised versions.
Read full post on quintelier.dev →
MORE POSTS LIKE THIS
npm supply-chain attack hits 400+ packages and steals developer credentials
Developer Tech · Aug 6, 2026
CI/CD & Release Engineering Cybersecurity & Development
Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
Securityonline · May 23, 2026
malware App-Bound Encryption
GitLab discovers widespread npm supply chain attack
GitLabBlog · Nov 24, 2025
Cybersecurity npm
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
Blog Talosintelligence · Oct 31, 2026
AI Landing Page Top Story
Pluralistic: Israeli ad-tech company was a delivery system for "mercenary spyware" (17 Oct 2026)
Pluralistic: Daily links from Cory Doctorow · Oct 17, 2026
ad blockers Ad tech
How Do Ransomware Attacks Work?
neemaasharma-boop · Oct 5, 2026
Cybersecurity Cybersecurity
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google
By continuing, you agree to our Privacy Policy.