Compromised Axios npm package version (1.14.1 and 0.30.4) Malicious plain-crypto-js package directory
This rule detects the creation, modification, or renaming of directories related to the malicious 'plain-crypto-js' npm package within a 'node_modules' folder. This activity is indicative of a supply chain compromise where a legitimate package (Axios) was found to include this malicious dependency.
Cortex XDR

