STARDUST CHOLLIMA Likely Compromises Axios npm Package

CrowdStrike published a blog titled “STARDUST CHOLLIMA Likely Compromises Axios npm Package” (Apr 1, 2026) reporting that the threat actor STARDUST CHOLLIMA likely gained control of the widely used Axios npm package to distribute malicious code. This represents a high-impact software supply-chain compromise affecting Node.js/browser ecosystems and any projects that depend on the compromised Axios releases. CrowdStrike recommends immediate mitigation steps such as auditing and isolating affected package versions, rotating credentials and CI/CD tokens, revoking compromised maintainer/npm tokens,