How AI‑Assisted Social Engineering Compromised the Popular Axios Module
A recent GitHub issue reveals that attackers used AI‑assisted social engineering—posing as a company founder, creating a fake Slack workspace, arranging Microsoft Teams meetings, and tricking the maintainer into installing a malicious npm package—to inject a trojan into the widely used Axios library, bypassing 2FA and publishing malicious code.
