State-backed hackers compromised a widely used open-source JavaScript library, turning routine software updates into a delivery mechanism for attacks aimed at US companies and cryptocurrency assets.
The Axios JavaScript NPM package was recently compromised, representing one of the highest impact supply chain attacks against the open source development ecosystem in recent months. Axios is the most ...
Google's security researchers have submitted a report investigating the Axios JavaScript library's supply chain attack that resulted in the installation of a remote access Trojan. Google has concluded ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...
On March 30-31, 2026, threat actors published two malicious versions of the popular HTTP library axios (versions 1.14.1 and 0.30.4) to the npm registry. Both versions included a new dependency named ...
An unknown hacker was able to breach one of the few accounts that can release new versions of Axios late Monday and published malicious versions of it. — Pixabay Axios, a tool widely used to develop ...
JavaScript client library for consuming OpenAPI-enabled APIs with axios. Types included. client is an axios instance initialized with baseURL from OpenAPI definitions and extended with extra operation ...
A supply-chain attack on the widely used Axios JavaScript library has raised fresh concern over the fragility of open-source software distribution after attackers slipped malicious code into two ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results