CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

MIDNIGHT NEPTUNE: Threat Actor Behind Axios Compromise

August 20, 2026

Google Threat Intelligence Group attributes the axios npm compromise to MIDNIGHT NEPTUNE, formerly known as UNC1069. The actor is linked to North Korean state-sponsored cyber operations and has been involved in multiple supply chain attacks.