Acronis Cyberthreats Update, April 2026
ID: db602064-72c5-5dba-b686-735d4aee54e5
STIX ID: report--db602064-72c5-5dba-b686-735d4aee54e5
Feed Name: TRU Security by Acronis
Threat Score
**Executive summary:** In March 2026 the widely used Axios JavaScript library was compromised via a hijacked npm maintainer account; malicious releases (1.14.1 and 0.30.4) briefly published a hidden dependency that installed a cross-platform RAT enabling remote code execution and credential theft, an incident Google researchers linked to UNC1069 — the packages were removed after about three hours but posed a significant global supply‑chain risk given Axios's >100M weekly downloads.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.