Referensi
CISA — Supply Chain Compromise Impacts Axios Node Package Manager
https://content.govdelivery.com/accounts/USDHSCISA/bulletins/413c7a5Microsoft Security — Mitigating the Axios npm Supply Chain Compromise
https://www.microsoft.com/en-us/security/blog/2026/04/01/mitigating-the-axios-npm-supply-chain-compromise/Google Threat Intelligence — North Korea-Nexus Threat Actor Compromises Axios npm Package
https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-packageDatadog Security Labs — Compromised Axios npm Package Delivers Cross-Platform RAT
https://securitylabs.datadoghq.com/articles/axios-npm-supply-chain-compromise/Microsoft Security — Mini Shai-Hulud: Compromised @antv npm Packages Enable CI/CD Credential Theft
https://www.microsoft.com/en-us/security/blog/2026/05/20/mini-shai-hulud-compromised-antv-npm-packages-enable-ci-cd-credential-theft/GitHub Advisory — Malicious Code in @antv/semantic-release-pnpm
https://github.com/advisories/GHSA-fh82-9wq3-484rCERT-In — Mini Shai-Hulud Supply Chain Attack Campaign
https://www.cert-in.org.in/s2cMainServlet?VLCODE=CIAD-2026-0026&pageid=PUBVLNOTES02
Disclaimer: Artikel ini disusun untuk tujuan edukasi keamanan siber, analisis ancaman, dan peningkatan keamanan pengembangan perangkat lunak. Informasi teknis didasarkan pada laporan keamanan yang tersedia hingga 27 Oktober 2026. Daftar paket terdampak dan rekomendasi mitigasi dapat berubah mengikuti pembaruan dari pengelola paket serta penyedia layanan keamanan.
