Amazon's threat intelligence team has linked a recent hack of the popular JavaScript library axios to earlier compromises by a North Korean hacking group. They traced domain records from the axios breach back to a lesser-known npm package that was used as a precursor in their attack strategy. This earlier incident highlights the tactics employed by the attackers and raises concerns about the security of open-source software, which many developers rely on for their projects. As more developers use these packages without thorough vetting, they become attractive targets for cybercriminals. Users of axios and related npm packages should be particularly vigilant about security practices to protect their applications from potential vulnerabilities.