How Malicious Axios Versions Hijacked NPM: A Deep Supply‑Chain Attack Analysis

StepSecurity uncovered a sophisticated supply‑chain attack on the popular Axios HTTP client where compromised maintainer credentials were used to publish malicious versions that injected a hidden postinstall RAT, evaded detection, and executed platform‑specific payloads before self‑destructing, prompting detailed forensic and remediation guidance.

Harden-RunnerRATaxios

0 likes · 31 min read

How Malicious Axios Versions Hijacked NPM: A Deep Supply‑Chain Attack Analysis

Black & White Path

Mar 3, 2026 · Information Security

How North Korean APT Used Steganography and Dead‑Drop Resolvers in 26 Malicious npm Packages

In March 2026, researchers uncovered a supply‑chain attack where a North Korean Lazarus‑linked group published 26 typosquatted npm packages that hide C2 commands via Pastebin steganography and deploy a modular RAT through Vercel, prompting detailed mitigation guidance for developers.

APTNode.js securityRAT

0 likes · 11 min read

How North Korean APT Used Steganography and Dead‑Drop Resolvers in 26 Malicious npm Packages

Sohu Tech Products

Sep 6, 2023 · Information Security

Unveiling DarkComet: In‑Depth Static & Dynamic Analysis of a Delphi RAT

This article provides a comprehensive technical breakdown of the DarkComet remote‑access trojan, covering its classification, Delphi‑based static characteristics, step‑by‑step dynamic behaviors such as hidden startup, file dropping, registry auto‑run, QQ data harvesting, SMS bombing, plus extracted IOCs and practical mitigation recommendations.

DarkCometDelphiIoC

0 likes · 9 min read

Unveiling DarkComet: In‑Depth Static & Dynamic Analysis of a Delphi RAT

Huolala Safety Emergency Response Center

Dec 2, 2022 · Information Security

How to Detect, Contain, and Eradicate the DarkKomet RAT: A Full Incident Response Walkthrough

This article provides a step‑by‑step technical analysis of the DarkKomet remote‑access trojan, covering its capabilities, infection vectors, detection methods using TTP‑driven EDR, containment actions, eradication procedures, root‑cause forensics, and post‑incident recovery measures.

DarkKometEDRForensics

0 likes · 9 min read

How to Detect, Contain, and Eradicate the DarkKomet RAT: A Full Incident Response Walkthrough