STARDUST CHOLLIMA Likely Compromises Axios npm Package

CrowdStrike published that a threat actor tracked as “STARDUST CHOLLIMA” likely compromised the popular Axios npm package, indicating a malicious supply‑chain injection that could impact any software depending on Axios (malicious code execution, credential theft, persistence). The feed also includes a separate CrowdStrike post on CVE-2026-20929 (Kerberos authentication relay via DNS CNAME abuse). Recommended immediate actions: identify and isolate systems using affected Axios versions, pin or roll back to verified clean versions, verify package checksums/signatures, block the compromised npm/​