A supply chain attack has compromised Axios npm packages, potentially leading to widespread compromises. The attack is believed to have been used to deploy malware, including remote access trojans. The origin of the attack is uncertain, but some reports suggest it may be linked to a North Korean hacking group.