STARDUST CHOLLIMA Likely Compromises Axios npm Package

CrowdStrike reports that STARDUST CHOLLIMA likely compromised the widely used Axios npm package. This is a software supply-chain incident affecting a popular Node.js HTTP client library; a compromised Axios package could enable malicious code execution, credential/data exfiltration, persistence, or downstream compromise across many projects that depend on the package. Organizations should assume elevated risk if they consume affected Axios versions, audit and verify package integrity, update or replace compromised packages, rotate secrets, and hunt for related indicators of compromise.