The "install a package for everything" culture in the JavaScript ecosystem just backfired again. ⚠️ The recent hacker attack targeting Axios (via malicious dependency injection) exposes the true ...
A major security incident has shaken the JavaScript ecosystem. One of the most widely used HTTP libraries, Axios, was compromised in a sophisticated supply chain attack that silently installed a ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...
On March 30-31, 2026, threat actors published two malicious versions of the popular HTTP library axios (versions 1.14.1 and 0.30.4) to the npm registry. Both versions included a new dependency named ...
If you are a JavaScript developer, you’re likely familiar with Axios, the popular library with over 80 million weekly downloads. Developers use Axios to make network requests, handle form submissions, ...
The naming and timing of this package suggest it was intentionally published to resemble a legitimate cryptography library, likely to confuse or deter researchers during our initial analysis. Sonatype ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results