← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Axios npm Supply Chain Compromise
WHITE UNC1069/STARDUST CHOLLIMA marumeso 2026-04-28 Modified: 2026-05-28
56
IOCs
HIGH VOLUME
North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack
STARDUST CHOLLIMAUNC1069Axiosnpmsupply chain attacksupply chain compromises
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
WAVESHAPER.V2 SILKBELL
Indicators of Compromise (56)
All domain FileHash-MD5 FileHash-SHA1 FileHash-SHA256
TYPEINDICATORDESCRIPTIONCREATED
domain sfrclak.com — 2026-04-28
domain callnrwise.com — 2026-04-28
FileHash-MD5 04e3073b3cd5c5bfcde6f575ecf6e8c1 MD5 of 617b67a8e1210e4fc87c92d1d1da45a2f311c08d26e89b12307cf583c900d101 2026-04-28
FileHash-MD5 089e2872016f75a5223b5e02c184dfec MD5 of f7d335205b8d7b20208fb3ef93ee6dc817905dc3ae0c10a0b164f4e7d07121cd 2026-04-28
FileHash-MD5 21d2470cae072cf2d027d473d168158c MD5 of 5bb67e88846096f1f8d42a0f0350c9c46260591567612ff9af46f98d1b7571cd 2026-04-28
FileHash-MD5 7658962ae060a222c0058cd4e979bfa1 MD5 of e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09 2026-04-28
FileHash-MD5 7a9ddef00f69477b96252ca234fcbeeb MD5 of 92ff08773995ebc8d55ec4b8e1a225d0d1e51efa4ef88b8849d0071230c9645a 2026-04-28
FileHash-MD5 8c782b59a786f18520673e8d669e3b0a MD5 of e49c2732fb9861548208a78e72996b9c3c470b6b562576924bcc3a9fb75bf9ff 2026-04-28
FileHash-MD5 9663665850cdd8fe12e30a671e5c4e6f MD5 of fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf 2026-04-28
FileHash-MD5 998fea0bac8471af3058b9f17d147b45 MD5 of 5b5fbc627502c5797d97b206b6dcf537889e6bea6d4e81a835e103e311690e22 2026-04-28
FileHash-MD5 a35a0ccb200134d136a00f78eb015c40 MD5 of 9c64f1c7eba080b4e5ff17369ddcd00b9fe2d47dacdc61444b4cbfebb23a166c 2026-04-28
FileHash-MD5 b731bd186af22ad6022f155f55103eec MD5 of 506690fcbd10fbe6f2b85b49a1fffa9d984c376c25ef6b73f764f670e932cab4 2026-04-28
FileHash-MD5 db7f4c82c732e8b107492cae419740ab MD5 of 58401c195fe0a6204b42f5f90995ece5fab74ce7c69c67a24c61a057325af668 2026-04-28
FileHash-MD5 e56bafda15a624b60ac967111d227bf8 MD5 of 59336a964f110c25c112bcc5adca7090296b54ab33fa95c0744b94f8a0d80c0f 2026-04-28
FileHash-MD5 eaffc2d2d00de417bb657a789938789d MD5 of 4465bdeaddc8c049a67a3d5ec105b2f07dae72fa080166e51b8f487516eb8d07 2026-04-28
FileHash-SHA1 07d889e2dadce6f3910dcbc253317d28ca61c766 SHA1 of 58401c195fe0a6204b42f5f90995ece5fab74ce7c69c67a24c61a057325af668 2026-04-28
FileHash-SHA1 13ab317c5dcab9af2d1bdb22118b9f09f8a4038e SHA1 of 92ff08773995ebc8d55ec4b8e1a225d0d1e51efa4ef88b8849d0071230c9645a 2026-04-28
FileHash-SHA1 2553649f2322049666871cea80a5d0d6adc700ca SHA1 of 5bb67e88846096f1f8d42a0f0350c9c46260591567612ff9af46f98d1b7571cd 2026-04-28
FileHash-SHA1 59faac136680104948e083b3b67a70af9bfa5d5e SHA1 of fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf 2026-04-28
FileHash-SHA1 968ca4d7e001f6ed99b4df8a680e4972b989f1c6 SHA1 of 5b5fbc627502c5797d97b206b6dcf537889e6bea6d4e81a835e103e311690e22 2026-04-28
FileHash-SHA1 978407431d75885228e0776913543992a9eb7cc4 SHA1 of f7d335205b8d7b20208fb3ef93ee6dc817905dc3ae0c10a0b164f4e7d07121cd 2026-04-28
FileHash-SHA1 a90c26e7cbb3440ac1cad75cf351cbedef7744a8 SHA1 of 617b67a8e1210e4fc87c92d1d1da45a2f311c08d26e89b12307cf583c900d101 2026-04-28
FileHash-SHA1 ae39c4c550ad656622736134035f17ca7a66a742 SHA1 of e49c2732fb9861548208a78e72996b9c3c470b6b562576924bcc3a9fb75bf9ff 2026-04-28
FileHash-SHA1 b0e0f12f1be57dc67fa375e860cedd19553c464d SHA1 of e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09 2026-04-28
FileHash-SHA1 c4a6e3a8572f4459622fe77bff0c1ce6d7451d0f SHA1 of 4465bdeaddc8c049a67a3d5ec105b2f07dae72fa080166e51b8f487516eb8d07 2026-04-28
FileHash-SHA1 ca7a36f4455b859489b530c13f9030ab0eadd0eb SHA1 of 506690fcbd10fbe6f2b85b49a1fffa9d984c376c25ef6b73f764f670e932cab4 2026-04-28
FileHash-SHA1 d6f3f62fd3b9f5432f5782b62d8cfd5247d5ee71 SHA1 of 59336a964f110c25c112bcc5adca7090296b54ab33fa95c0744b94f8a0d80c0f 2026-04-28
FileHash-SHA1 d7bab7f0ece91bdf04bbccf77080922656c15dc3 SHA1 of 9c64f1c7eba080b4e5ff17369ddcd00b9fe2d47dacdc61444b4cbfebb23a166c 2026-04-28
FileHash-SHA256 01c9484abc948daa525516464785009d1e7a63ffd6012b9e85b56477acc3e624 — 2026-04-28
FileHash-SHA256 0d83030ab8bfba675fc1661f0756b6770be7dd80b1b718de3d68a01f2e79a5f4 — 2026-04-28
FileHash-SHA256 20df0909a3a0ef26d74ae139763a380e49f77207aa1108d4640d8b6f14cab8ca — 2026-04-28
FileHash-SHA256 4465bdeaddc8c049a67a3d5ec105b2f07dae72fa080166e51b8f487516eb8d07 — 2026-04-28
FileHash-SHA256 506690fcbd10fbe6f2b85b49a1fffa9d984c376c25ef6b73f764f670e932cab4 — 2026-04-28
FileHash-SHA256 526ab39d1f56732e4e926715aaa797feb13b1ae86882ec570a4d292e7fdc3699 — 2026-04-28
FileHash-SHA256 58401c195fe0a6204b42f5f90995ece5fab74ce7c69c67a24c61a057325af668 — 2026-04-28
FileHash-SHA256 59336a964f110c25c112bcc5adca7090296b54ab33fa95c0744b94f8a0d80c0f — 2026-04-28
FileHash-SHA256 5b5fbc627502c5797d97b206b6dcf537889e6bea6d4e81a835e103e311690e22 — 2026-04-28
FileHash-SHA256 5bb67e88846096f1f8d42a0f0350c9c46260591567612ff9af46f98d1b7571cd — 2026-04-28
FileHash-SHA256 5e2ab672c3f98f21925bd26d9a9bba036b67d84fde0dfdbe2cf9b85b170cab71 — 2026-04-28
FileHash-SHA256 617b67a8e1210e4fc87c92d1d1da45a2f311c08d26e89b12307cf583c900d101 — 2026-04-28
FileHash-SHA256 7b47ed28e84437aee64ffe9770d315c1b984135105f7f608a8b9579517bc0695 — 2026-04-28
FileHash-SHA256 8449341ddc3f7fcc2547639e21e704400ca6a8a6841ae74e57c04445b1276a10 — 2026-04-28
FileHash-SHA256 92ff08773995ebc8d55ec4b8e1a225d0d1e51efa4ef88b8849d0071230c9645a — 2026-04-28
FileHash-SHA256 9c64f1c7eba080b4e5ff17369ddcd00b9fe2d47dacdc61444b4cbfebb23a166c — 2026-04-28
FileHash-SHA256 a224dd73b7ed33e0bf6a2ea340c8f8859dfa9ec5736afa8baea6225bf066b248 — 2026-04-28
FileHash-SHA256 a98e04dec3a7fe507eb30c72da808bad60bc14d9d80f9770ec99c438faa85a1a — 2026-04-28
FileHash-SHA256 ad8ba560ae5c4af4758bc68cc6dcf43bae0e0bbf9da680a8dc60a9ef78e22ff7 — 2026-04-28
FileHash-SHA256 cdc05cd30eb53315dadb081a7b942bb876f0d252d20e8ed4d2f36be79ee691fa — 2026-04-28
FileHash-SHA256 e10b1fa84f1d6481625f741b69892780140d4e0e7769e7491e5f4d894c2e0e09 — 2026-04-28
FileHash-SHA256 e49c2732fb9861548208a78e72996b9c3c470b6b562576924bcc3a9fb75bf9ff — 2026-04-28
FileHash-SHA256 f7d335205b8d7b20208fb3ef93ee6dc817905dc3ae0c10a0b164f4e7d07121cd — 2026-04-28
FileHash-SHA256 fcb81618bb15edfdedfb638b4c08a2af9cac9ecfa551af135a8402bf980375cf — 2026-04-28
FileHash-MD5 90e8e227ba8bef0ea7e0212b5b1e0d4c MD5 of ed8560c1ac7ceb6983ba995124d5917dc1a00288912387a6389296637d5f815c 2026-04-28
FileHash-SHA1 dbd62d788ce8dcaa96116a73f70ee24813d59428 SHA1 of ed8560c1ac7ceb6983ba995124d5917dc1a00288912387a6389296637d5f815c 2026-04-28
FileHash-SHA256 ed8560c1ac7ceb6983ba995124d5917dc1a00288912387a6389296637d5f815c — 2026-04-28
FileHash-SHA256 c373706b3456c36e8baa0a3ee5aed358c1fe07cba04f65790c90f029971e378a — 2026-04-28
References (7)
↗ https://devblogs.microsoft.com/devops/axios-npm-supply-chain-compromise-guidance-for-azure-pipelines-customers/ ↗ https://unit42.paloaltonetworks.com/axios-supply-chain-attack/ ↗ https://www.trendmicro.com/en_us/research/26/c/axios-npm-package-compromised.html ↗ https://www.elastic.co/security-labs/axios-one-rat-to-rule-them-all ↗ https://www.aikido.dev/blog/axios-npm-compromised-maintainer-hijacked-rat ↗ https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package ↗ https://www.crowdstrike.com/en-us/blog/stardust-chollima-likely-compromises-axios-npm-package/