Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
A newly disclosed security flaw in Axios, one of the most widely used HTTP client libraries in the JavaScript ecosystem, has raised concern across software and cloud security teams after official ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.
Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
Another supply chain security threat emerged this week with the compromise of Axios. It is a popular JavaScript HTTP library, but for three hours, it ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results