Cybersecurity Daily: Anthropic Source Code Leak and North Korean Hack of Axios

AI development tools and open-source packages have become critical links in the software supply chain. If source code or package maintenance processes are compromised, the risks can spread rapidly. The incidents involving AI company Anthropic, popular NPM package Axios and Cisco also affected blockchain project OpenClaw, highlighting the dual threats of human error and supply-chain attacks.

The April 1 cybersecurity daily reported that human error at Anthropic exposed Claude Code source code. Axios was targeted in a supply-chain attack by North Korean hacking group UNC1069, with the impact extending to blockchain-related projects including OpenClaw. The same wave of security disclosures also included the theft of source code for Cisco AI solutions. The financial losses and full extent of the impact have not been disclosed.