Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s ...
Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...
Most likely, a maintainer's GitHub and npm accounts are compromised as these issues are getting deleted. I have also reported this as a vulnerability, so that a CVE can be generated.
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results