FlagThis

Abstract

On March 31, 2026, the North Korea-nexus threat actor UNC1069 compromised the lead maintainer of the Axios npm package through an AI-assisted social engineering campaign. The attack delivered the WAVESHAPER.V2 remote access trojan and targeted AI vendor infrastructure, specifically impacting OpenAI's macOS application code-signing process. The incident highlights the vulnerability of open-source maintainers as a privileged access vector into AI build pipelines and reveals a critical weakness where legacy npm tokens can bypass modern OIDC-based provenance infrastructure.