Zscaler Reports March 2026 Supply-Chain Attacks Affecting Axios and LiteLLM

Summary

Zscaler reports supply-chain compromises involving Axios and LiteLLM, lists related malware detections and indicators of compromise, and says it has added coverage to detect downloads of compromised packages.

Key points

The article says five major software supply-chain attacks occurred in March 2026, including the Axios NPM package compromise attributed to a North Korean threat actor.
It identifies TeamPCP as responsible for compromises involving Trivy, KICS, LiteLLM, and Telnyx.
The article focuses on the Axios and LiteLLM incidents.
Listed Axios-related indicators include affected package versions and hashes, plus hashes for scripts and other packages.
Listed LiteLLM indicators include hashes for files and versions 1.82.7 and 1.82.8.
Network indicators include checkmarx[.]zone for C2 polling and models[.]litellm[.]cloud for exfiltration.
Zscaler says it added detections for threats associated with the Axios and LiteLLM campaigns.

Article Details

Event Type: Software supply chain attacks involving compromised packages and projects.
Impact: The article reports that TeamPCP compromised Trivy, KICS, LiteLLM, and Telnyx, and attributes the Axios NPM package compromise to a North Korean threat actor. It lists malicious package and file hashes, plus network indicators for C2 polling and exfiltration. Zscaler says it added detection coverage for threats associated with Axios and LiteLLM.

Indicators of compromise

Type	Indicator	Context
DOMAIN	`checkmarx[.]zone`	Listed as a C2 polling network indicator.
DOMAIN	`models[.]litellm[.]cloud`	Listed as an exfiltration URL network indicator.
MD5	`04e3073b3cd5c5bfcde6f575ecf6e8c1`	Hash listed for the powershell script in the Axios IOC section.
MD5	`089e2872016f75a5223b5e02c184dfec`	Hash listed for system.bat in the Axios IOC section.
MD5	`1b8615b9732833b4dd0a3e82326982fa`	Hash listed for the @shadanai/openclaw package in the Axios IOC section.
MD5	`21d2470cae072cf2d027d473d168158c`	Hash listed for the compromised axios 1.14.1 package.
MD5	`2e3a4412a7a487b32c5715167c755d08`	Hash listed for the LiteLLM v1.82.8 package.
MD5	`52f3311ceb5495796e9bed22302d79bc`	Hash listed for the compromised plain-crypto-js 4.2.0 package.
MD5	`759e597c3cc23c04cd39301bd93fc79f`	Hash listed for the @qqbrowser/openclaw-qbot package in the Axios IOC section.
MD5	`7658962ae060a222c0058cd4e979bfa1`	Hash listed for setup.js in the Axios IOC section.
MD5	`7a9ddef00f69477b96252ca234fcbeeb`	Hash listed for the osx script in the Axios IOC section.
MD5	`7cac57b2d328bd814009772dd1eda429`	Hash listed for p.py in the LiteLLM IOC section.
MD5	`85ed77a21b88cae721f369fa6b7bbba3`	Hash listed for the LiteLLM v1.82.7 package.
MD5	`9663665850cdd8fe12e30a671e5c4e6f`	Hash listed for the python script in the Axios IOC section.
MD5	`cde4951bee7e28ac8a29d33d34a41ae5`	Hash listed for litellm_init.pth in the LiteLLM IOC section.
MD5	`db7f4c82c732e8b107492cae419740ab`	Hash listed for the compromised plain-crypto-js 4.2.1 package.
MD5	`e56bafda15a624b60ac967111d227bf8`	Hash listed for the compromised axios 0.30.4 package.
MD5	`f5560871f6002982a6a2cc0b3ee739f7`	Hash listed for proxy_server.py in the LiteLLM IOC section.