The Axios Software Supply Chain Attack: What Happened and Why a Curated Catalog Would Have Stopped It Cold | ActiveState

A comprehensive breakdown of the North Korean-linked attack that weaponized one of JavaScript’s most trusted libraries, and the architecture that makes it impossible to repeat.