Axios Supply Chain Forensics: Trusted Publishing Bypass, Cross-Platform RAT Architecture, and the Credential Rotation Checklist

Analysis

Datadog: How npm Registry Metadata Exposed the Axios Account Takeover Before Any Alert Fired

Datadog shows how the shift from GitHub Actions OIDC trusted publishing to a direct CLI publish with a changed maintainer email is a forensic smoking gun visible in plain npm registry API responses. If your org does not routinely diff _npmUser and trustedPublisher fields on critical packages, this is the monitoring gap to close today.

Elastic Security Labs: The Axios RAT is One Cross-Platform Implant, Not Three Separate Tools

Elastic's teardown confirms that the Windows PowerShell, macOS C++, and Linux Python payloads share an identical C2 protocol, command set, beacon interval, and the same anachronistic IE8/WinXP user-agent string, making that user-agent a reliable detection signal on any modern host. The peinject command works differently per platform but the operator interface is unified, which signals a mature, well-resourced tooling operation.

Threat Intelligence

Microsoft Threat Intelligence: Full Sapphire Sleet Attribution, C2 Infrastructure Breakdown, and Defender Detections

Microsoft ties the Axios compromise to Sapphire Sleet via the plain-crypto-js publisher account and known Hostwinds VPS infrastructure, and details the Windows RAT persistence chain including registry Run key and wt.exe masquerading. The mitigation list is actionable: pin exact Axios versions, run npm ci --ignore-scripts, and rotate any secret exposed to the compromised install environment.

Bitdefender: Wiz Telemetry Shows 3% RAT Execution Rate and Behavioral Blocks That Fired Before Any Signature

Bitdefender's advisory highlights that behavioral detections caught wt.exe executing from %PROGRAMDATA% with hidden window flags six minutes after [email protected] went live, well before any signature update, which is the argument for investing in behavioral EDR over signature reliance. The pre-staged clean 4.2.0 decoy package published 18 hours earlier shows deliberate trust-signal manipulation that static scanners missed entirely.

Detection

Qualys: QIDs 386943 and 5010006 for Axios RAT Detection, Plus UNC1069 Attribution from Google GTIG

Qualys adds Google Threat Intelligence Group's UNC1069 attribution using WAVESHAPER.V2 fingerprinting, giving defenders a second independent attribution data point alongside Microsoft's Sapphire Sleet designation. QID 5010006 requires SwCA to be enabled, so check that setting before assuming your scan coverage is complete.