Axios Supply Chain Aftermath: Broken Linux Payloads, C2 Protocol Details, and the CI/CD Controls That Matter

Analysis

Axios npm RAT: Full C2 Protocol Internals, Operational Weaknesses, and Every IOC

The most technically complete breakdown of the Axios attack yet, including the IE8 User-Agent beacon pattern, broken Linux peinject bug, and the IDS base64 prefixes you can drop into detection rules right now. If you want to build detections rather than just block the C2, this is the reference.

Why the Axios RAT Is a Direct Threat to AI Coding Agent Workflows

IronPlate connects the Axios compromise directly to agentic AI risk: if Claude Code, Cursor, or any autonomous coding agent ran npm install during the window, the RAT deployed with zero human approval step. This is the angle most security teams have not stress-tested yet.

Threat Intelligence

Microsoft Attributes Axios npm RAT to Sapphire Sleet With Full Kill Chain

Microsoft Threat Intelligence formally attributes the Axios compromise to North Korean Sapphire Sleet and walks through the dependency insertion technique, OS-specific C2 routing, and the registry persistence mechanism on Windows. The mitigation section on removing caret and tilde from package.json is worth sending to every dev team today.

SANS Links Axios Compromise to TeamPCP Initial Access Broker Pattern

SANS analysts connect the Axios attack to the broader TeamPCP campaign that hit Trivy, KICS, LiteLLM, and Telnyx in quick succession and flags the likely IAB angle where stolen publishing credentials get resold to multiple threat actors. If your threat model includes supply chain, this context changes your prioritization.

Remediation

Snyk's Axios Compromise Breakdown: Lockfile Verification Steps and What Bun Users Missed

Snyk covers the full attack timeline with actionable lockfile audit commands for npm, yarn, and Bun, plus a clear breakdown of the three secondary compromised packages most teams are still overlooking. The Bun lockfile inspection commands alone are worth bookmarking.