Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines

Attackers hijacked an axios maintainer account and published two poisoned releases ([email protected] and [email protected]) that included a malicious dependency ([email protected]) which executed post-install to fetch and deploy multi-OS RAT payloads; the campaign bypassed CI, staged payloads in advance, attempted to self-destruct traces, and has been attributed by Google to the suspected North Korean actor UNC1069, with affected users urged to assume compromise and remediate.