Malicious Dependencies

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

The incident exposes how install-time scripts in a common package can silently deploy malware.