RuntimeRebel — #AxiosCybersecurity articles tagged #Axios on RuntimeRebel.https://runtimerebel.comCVE-2026-40175: Siemens gWAP RCE via Axios Prototype Pollutionhttps://runtimerebel.com/blog/cve-2026-40175-siemens-gwap-rce-via-axios-prototype-pollutionhttps://runtimerebel.com/blog/cve-2026-40175-siemens-gwap-rce-via-axios-prototype-pollutionSiemens gWAP is vulnerable to RCE via CVE-2026-40175, a prototype pollution flaw in the Axios HTTP client library. Update to v3.1.1 or later.Thu, 14 May 2026 20:40:58 GMTCVE-2026-40175Siemens gWAPAxiosRCEPrototype PollutionCritical ManufacturingICSAxios npm Supply Chain Attack: Malicious Payloads and Mitigationhttps://runtimerebel.com/blog/axios-npm-supply-chain-attack-malicious-payloads-and-mitigationhttps://runtimerebel.com/blog/axios-npm-supply-chain-attack-malicious-payloads-and-mitigationAxios npm versions 1.14.1 and 0.30.4 compromised via a malicious dependency injecting remote access trojans. Learn how to detect and remediate this threat.Tue, 21 Apr 2026 08:44:16 GMTAxiosNPMNode JsPlain Crypto JsSupply Chain CompromiseCISAOpenAI Revokes macOS App Certificate Following Supply Chain Attackhttps://runtimerebel.com/blog/openai-revokes-macos-app-certificate-following-supply-chain-attackhttps://runtimerebel.com/blog/openai-revokes-macos-app-certificate-following-supply-chain-attackOpenAI revokes its macOS app signing certificate after a GitHub Actions workflow downloaded a malicious Axios library version during a supply chain incident.Mon, 13 Apr 2026 08:48:46 GMTOpenAImacOSAxiosGitHub ActionsSupply Chain SecurityAxios Attack: Industrialized Social Engineering on NPM Maintainershttps://runtimerebel.com/blog/axios-attack-industrialized-social-engineering-on-npm-maintainershttps://runtimerebel.com/blog/axios-attack-industrialized-social-engineering-on-npm-maintainersAn analysis of the Axios NPM package attack reveals advanced, scaled social engineering campaigns targeting open-source maintainers, elevating supply chain risk.Tue, 07 Apr 2026 00:41:47 GMTAxiosNPMSocial EngineeringSupply Chain AttackOpen Source SecurityMaintainer CompromiseAxios npm Hijack Attempt: Detecting Social Engineering Tacticshttps://runtimerebel.com/blog/axios-npm-hijack-attempt-detecting-social-engineering-tacticshttps://runtimerebel.com/blog/axios-npm-hijack-attempt-detecting-social-engineering-tacticsNorth Korean threat actors targeted an Axios maintainer with a fake Microsoft Teams fix, highlighting critical risks to open-source supply chains.Sun, 05 Apr 2026 00:41:54 GMTAxiosNPMLazarus GroupSocial EngineeringSupply Chain SecurityUNC1069 Social Engineering Leads to Axios npm Supply Chain Compromisehttps://runtimerebel.com/blog/unc1069-social-engineering-leads-to-axios-npm-supply-chain-compromisehttps://runtimerebel.com/blog/unc1069-social-engineering-leads-to-axios-npm-supply-chain-compromiseRuntime Rebel details how North Korean threat actor UNC1069 leveraged targeted social engineering against an Axios npm package maintainer, leading to a critical supply…Fri, 03 Apr 2026 16:16:04 GMTUNC1069AxiosNPMSupply Chain AttackSocial EngineeringNorth KoreaAxios NPM Supply Chain Attack Bypasses GitHub Actions CI/CDhttps://runtimerebel.com/blog/axios-npm-supply-chain-attack-bypasses-github-actions-ci-cdhttps://runtimerebel.com/blog/axios-npm-supply-chain-attack-bypasses-github-actions-ci-cdA sophisticated supply chain attack targeted the Axios NPM package, leveraging a compromised token to bypass GitHub Actions CI/CD and deploy malicious versions.Wed, 01 Apr 2026 12:28:22 GMTAxiosNPMSupply Chain AttackNorth KoreaGitHub ActionsCI CDAxios npm Supply Chain Attack Attributed to North Korea's UNC1069https://runtimerebel.com/blog/axios-npm-supply-chain-attack-attributed-to-north-korea-s-unc1069https://runtimerebel.com/blog/axios-npm-supply-chain-attack-attributed-to-north-korea-s-unc1069Google Threat Intelligence attributes a major Axios npm supply chain attack to North Korean group UNC1069, emphasizing risks to developer environments.Wed, 01 Apr 2026 08:34:33 GMTUNC1069NPMAxiosNorth KoreaSupply Chain SecurityUNC1069 Leverages Axios NPM Supply Chain to Deploy WAVESHAPER.V2https://runtimerebel.com/blog/unc1069-leverages-axios-npm-supply-chain-to-deploy-waveshaper-v2https://runtimerebel.com/blog/unc1069-leverages-axios-npm-supply-chain-to-deploy-waveshaper-v2North Korea-nexus UNC1069 compromised widely used Axios NPM package (v1.14.1, 0.30.4) by injecting plain-crypto-js to deploy WAVESHAPER.V2 backdoor across multiple OS.Wed, 01 Apr 2026 00:45:35 GMTUNC1069WAVESHAPER V2AxiosNPMSupply Chain AttackPlain Crypto JsSILKBELLNorth KoreaAxios NPM Compromise: Supply Chain Threat Analysishttps://runtimerebel.com/blog/axios-npm-compromise-supply-chain-threat-analysishttps://runtimerebel.com/blog/axios-npm-compromise-supply-chain-threat-analysisAnalysis of the Axios NPM package compromise, a potential supply chain attack impacting JavaScript HTTP client library users, possibly by North Korean threat actors.Wed, 01 Apr 2026 00:44:25 GMTAxiosNPMJavaScriptSupply Chain AttackThreat ActorsAxios npm Package Hijacked: Cross-Platform Malware Distributionhttps://runtimerebel.com/blog/axios-npm-package-hijacked-cross-platform-malware-distributionhttps://runtimerebel.com/blog/axios-npm-package-hijacked-cross-platform-malware-distributionAnalysis of the Axios npm package hijack distributing remote access trojans to Linux, Windows, and macOS systems. Learn to protect your software supply chain.Tue, 31 Mar 2026 16:29:10 GMTAxiosNPMSupply Chain AttackRemote Access TrojanMalwareJavaScriptLinuxWindowsmacOSAxios Supply Chain Attack: RAT Found in Versions 1.14.1 and 0.30.4https://runtimerebel.com/blog/axios-supply-chain-attack-rat-found-in-versions-1-14-1-and-0-30-4https://runtimerebel.com/blog/axios-supply-chain-attack-rat-found-in-versions-1-14-1-and-0-30-4Malicious Axios versions 1.14.1 and 0.30.4 inject a cross-platform RAT via a fake dependency. Identify and remediate this npm supply chain threat now.Tue, 31 Mar 2026 08:29:42 GMTAxiosNPM SecuritySupply Chain AttackRATJavascript SecurityMalicious Dependency