Supply Chain Attacks Surge March 2026

Five major software supply chain attacks occurred in March 2026, including compromised Axios NPM package and LiteLLM on PyPI by TeamPCP group, targeting developer credentials and systems.

Npm, Inc.

Github

The Python Package Index

Zscaler

Axios

AI Coding Exposes Software Supply Chain

Axios library hack exposed millions of devices to malware without touching source code. AI coding tools increase supply chain vulnerabilities by selecting vulnerable dependencies 50% more often than humans. Socket detected the attack in 6 minutes.

Socket

Npm, Inc.

Github

Axios

Andreessen Horowitz

Axios NPM Supply Chain Attack

Cisco Talos reports on the recent Axios NPM supply chain incident, detailing payloads delivered from actor-controlled infrastructure targeting the popular JavaScript library.

Cisco Talos

Npm, Inc.

Cisco

Axios