Analysis: Lazarus Group Behind Axios Supply Chain Poisoning Incident

On April 1, following the supply chain poisoning incident involving Axios npm yesterday, Weibu Intelligence Bureau attributed this attack activity to the Lazarus Group through in-depth sample analysis and attack tracing, combined with long-term threat intelligence accumulation and tracking of key APT organizations. This incident has significant implications. As one of the core dependencies in the JavaScript ecosystem, Axios has over 3.6 billion downloads annually, with more than 174,000 projects relying on it directly or indirectly. Many users have already been infected with malicious code while installing related software such as OpenClaw, affecting Windows, macOS, and Linux systems. Users are advised to immediately check for reverse connections to sfrclak.com.