IOC overlap from axios attack und WAVESHAPER.
It appears highly probably that #DPRK was behind the #axios attack! (IOC comparison by x.com/dez_) A further noteworthy detail is that the #threatactors compromised the website npm.org (National Association of Pastoral Musicians) so they could host their #payloads on packages.npm.org! #cyber