Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...
Axios functions as pre-built software that a developer can easily incorporate into a JavaScript project. However, a hacker ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...
Spread the loveIn a significant cybersecurity incident, the popular HTTP client Axios became the target of a supply chain attack on March 31, 2026. This attack involved the compromise of an npm ...