Highlights from March
Coming in at number 1 on this month’s top 10 most prevalent threat list is activity related to March 2026’s axios
npm compromise. On March 30, 2026, security researchers discovered that the widely-used npm package axios
was compromised through an account takeover attack targeting a lead maintainer. Attackers bypassed the project’s GitHub Actions CI/CD pipeline by compromising...
The March 2026 threat landscape underscores the escalating sophistication of supply chain attacks, where adversaries exploit trusted software distribution channels to achieve broad impact. The axios and LiteLLM compromises reveal a troubling pattern: attackers are not just targeting vulnerabilities but actively subverting the human and procedural layers of open-source ecosystems. The account takeover of a lead maintainer and the exfiltration of CI/CD credentials highlight how social engineering ...