Drift compromise and axios compromise (mentioned in "Graphalgo fake recruiter malware campaign respawned")

Date (as written): 2026-04-09T15:00:00.000Z
Year: 2026
Actors (as written): North Korean state-sponsored threat actors
Actor pages: North Korean state-sponsored threat actors
Dollar figures (as written): $285M

Source entries (1)

ReversingLabs blog

Drift compromise and axios compromise (mentioned in "Graphalgo fake recruiter malware campaign respawned") · 2026-04-09T15:00:00.000Z

The latest operations conducted by North Korean state-sponsored threat actors include the compromise of one of the most popular npm packages: axios , as well as the theft of $285M in the Drift compromise .

https://www.reversinglabs.com/blog/graphalgo-campaign-respawned

Suggest a correction on GitHub