Axios Supply Chain Post-Mortem: Elastic's Cross-Platform RAT Architecture and What One User-Agent String Reveals

Analysis

Elastic Security Labs: The Axios RAT Is One Unified Implant Framework Across Three Platforms

Elastic's analysis is the most technically complete breakdown yet, showing that the Windows PowerShell, macOS C++, and Linux Python payloads are three implementations of the same RAT spec with identical C2 protocol, command set, and beacon cadence. The hardcoded IE8/Windows XP user-agent string on all three variants is a gift to defenders and a bizarre operational choice that makes network detection trivial on macOS and Linux hosts.

Threat Intelligence

Microsoft Attributes Axios npm Compromise to North Korean Sapphire Sleet, Details Full Kill Chain

Microsoft confirms Sapphire Sleet ownership of the sfrclak.com C2 infrastructure and walks through every stage from the plain-crypto-js dependency injection through OS-specific RAT delivery. The Windows variant adds a registry run key under the guise of MicrosoftUpdate, which survives a RAT kill command and persists across reboots.

Remediation

Snyk's Axios Incident Breakdown: Secondary Compromised Packages and Bun Lockfile Blind Spots

Snyk surfaces two additional packages shipping the malicious plain-crypto-js dependency that most coverage missed, and flags that Bun users with binary lockfiles need an extra step to audit exposure. The remediation checklist is the most actionable published so far, including the npm ci --ignore-scripts control that would have blocked the entire attack vector.

Attribution

SANS Connects Axios to TeamPCP's Broader Credential-Theft Campaign Across npm and PyPI

SANS ties the Axios attack to TeamPCP, which hit Trivy, KICS, LiteLLM, and Telnyx in the eight days prior, suggesting an initial access broker sitting on a stockpile of compromised publishing credentials. If that attribution holds, more high-download packages are likely already staged for the same treatment.