Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...
Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...