turbo-axios / faster-axios Epsilon Stealer typosquats

SafeDep: two axios typosquats (turbo-axios, faster-axios) delivered
Epsilon Stealer through a four-stage chain, including an Electron
stage. Distinct from the real axios compromise (AS22).

Mapped techniques

T0129 Typosquatting
T0109 Publish malicious artifact
T0172 Runtime backdoor

supply-chain axios lookalikes

T0129 · Initial Access · Typosquatting

turbo-axios and faster-axios.

T0109 · Resource Development · Publish malicious artifact

Four-stage Epsilon Stealer chain.

T0172 · Execution · Runtime backdoor

Electron-stage stealer.

Sources

https://safedep.io/malicious-faster-axios-npm-epsilon-stealer