Security Advisories

Public advisories, audit tools, and remediation guidance for active supply chain threats. Published by the Arctyra Security Practice.

Axios npm Compromise: Maintainer Account Hijacked, RAT Deployed

Active Threat

March 31, 2026

The npm account of the lead Axios maintainer was hijacked. Two malicious versions deployed a cross-platform RAT targeting macOS, Windows, and Linux. Axios has roughly 100 million weekly downloads.

npm

TeamPCP Supply Chain Attack: Audit Your GitHub and npm Projects

Active Threat

March 26, 2026

A multi-stage supply chain campaign compromising GitHub Actions (Trivy, Checkmarx KICS), npm (CanisterWorm), and PyPI (LiteLLM). Includes a full 6-phase audit prompt and remediation checklist.

GitHub ActionsnpmPyPI

Arctyra publishes security advisories when supply chain threats affect the tools and ecosystems our clients and the broader developer community rely on. These resources are free, ungated, and designed to be actionable. If your organization needs help auditing supply chain exposure or hardening CI/CD infrastructure, we can help.