Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...
A widely used JavaScript package used with over a hundred million weekly downloads has been compromised in a new supply chain ...
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
Axios functions as pre-built software that a developer can easily incorporate into a JavaScript project. However, a hacker ...
Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer account was taken over. Security r ...
Anthropic says it accidentally leaked the source code for Claude Code, which is closed source, but the company says no ...
A hacker has manipulated a widely-used JavaScript library, Axios, to distribute malware, potentially compromising millions of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results