JUST IN: An attack attributed to North Korean hackers briefly compromised Axios, one of the most widely used open source projects on the web, following a social engineering campaign that reportedly took weeks.

The incident puts further pressure on open source software maintainers, in a context where these repositories have become high value targets for stealing credentials, private keys, and digital assets.
Axios maintainer Jason Saayman indicated that the attackers built trust over approximately two weeks before compromising his computer.