The npm Threat Landscape: Attack Surface and Mitigations

Unit 42 research (Apr 2026) highlights an intensifying threat landscape across software supply chains, cloud AI agents, and networking: npm supply‑chain attacks (wormable malware, CI/CD persistence, multi‑stage droppers), widespread supply‑chain incidents (Axios, TeamPCP with ties to Vect ransomware), and active exploitation attempts of TP‑Link command‑injection CVE‑2023‑33538 with Mirai‑style payloads. Parallel trends show AI/agent risks — frontier models enabling autonomous zero‑day discovery and offensive multi‑agent cloud attacks, prompt‑injection and over‑privileged agents (Amazon Bedrock