The Axios Supply Chain Attack

The Axios supply chain attack proves attackers don’t need vulnerabilities if they can hit the assembly line. By compromising a single npm maintainer account, they were able to slip a trojan into Axios updates that executed automatically inside developer machines and CI/CD pipelines long before security tools could intervene. On this episode of State of Cybercrime, Matt and David examine how the Axios incident marks a shift toward supply chain abuse and what Google’s attribution to a North Korean-linked group reveals about the blurred lines between developer infrastructure, cybercrime, and geopolitics. Want to join us live? Save a seat here: More from Varonis ⬇️ Visit our website: LinkedIn: X/Twitter: Instagram:

You can listen to The Axios Supply Chain Attack online on Radio and Podcast. Open the player on this page to stream the available audio.

The Axios Supply Chain Attack is an episode from Inside Out Security by Mike Buckbee.

This episode is 00:43:11 long.

This episode was published on Apr 10, 2026.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from Inside Out Security when more episodes are available from the podcast feed.