Axios Supply Chain Attack Detection

mark goldie@Fraggles

•updated Apr 2, 2026•6•1•218

Detects network connections to malicious domains, associated IPs, execution of related malicious file hashes, registry persistence, and postinstall script executions related to UNC1069 NPM/Axios supply chain attacks deploying SILKBELL and WAVESHAPER.V2. Categorized into risk-scored scenarios.