Supply Chain Malware Alert: plain-crypto-js Compromises Axios Packages

The report documents a high-impact supply-chain malware campaign in which a trojanized npm package (plain-crypto-js) embedded in compromised Axios versions leveraged npm postinstall hooks and advanced obfuscation to deploy cross-platform RATs that exfiltrate credentials and maintain persistent remote control; it includes decoded payload behavior, MITRE ATT&CK mappings, IOCs (hashes, domains, IP), affected file paths, and remediation guidance.