Google's cybersecurity firm Mandiant has reported a significant supply chain attack on the popular JavaScript library Axios, allegedly orchestrated by North Korean hackers. The attack occurred on March 31, during which hackers injected malicious updates into the software over a three-hour period, affecting thousands of U.S. companies across sectors including healthcare, finance, and cryptocurrency. Mandiant's CTO, Charles Carmakal, highlighted that Axios is widely used for website development and management. The attackers aimed to exploit obtained credentials and system access to steal cryptocurrency, potentially funding North Korea's nuclear and missile programs. Assessing the downstream impact of this breach may take several months.