PANews reported on April 1st that, according to CNN, suspected North Korean hackers compromised axios, an open-source software used by thousands of US companies, sending malicious updates to organizations that downloaded the software within three hours on Tuesday morning, attempting to steal cryptocurrency to fund North Korea's nuclear and missile programs. Google's Mandiant stated that the attack was carried out by a suspected North Korean hacking group, and the hackers are expected to use the stolen credentials and system access to target businesses and steal cryptocurrency. Security firm Huntress has identified approximately 135 compromised devices involving about 12 companies. This is the latest in a series of supply chain attacks by North Korea in recent years. Last year, North Korean hackers stole $1.5 billion in cryptocurrency in a single attack, setting a record at the time for the largest cryptocurrency hack.

Earlier reports yesterday indicated that version 1.14.1 of the npm core package axios had been subjected to active supply chain attacks .