Threat actors hijacked the npm account of Axios to distribute RAT malware via malicious package updates. Threat actors compromised the npm account of...
Vous n'êtes pas connecté
Maroc - SECURITYAFFAIRS.CO - A La Une - 31/Mar 18:30
Threat actors hijacked the npm account of Axios to distribute RAT malware via malicious package updates. Threat actors compromised the npm account of Axios, a widely used library with over 100M weekly downloads, and published malicious versions to spread remote access trojans across Linux, Windows, and macOS. The supply chain attack was identified by multiple […]
Threat actors hijacked the npm account of Axios to distribute RAT malware via malicious package updates. Threat actors compromised the npm account of...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to...
What Happened On March 31, 2026, a threat actor hijacked the npm account of the lead Axios maintainer and published two malicious versions of one of...
What Happened On March 31, 2026, a threat actor hijacked the npm account of the lead Axios maintainer and published two malicious versions of one of...
One of the most widely used JavaScript libraries in the world was turned into a weapon on March 30, 2026, when attackers poisoned the Axios npm...
The Axios npm package has been compromised in a supply chain attack that uploaded new versions of the package containing malicious code. Any...
A newly discovered software supply chain attack targeting the npm ecosystem briefly compromised one of the most widely used JavaScript libraries in...
A newly discovered software supply chain attack targeting the npm ecosystem briefly compromised one of the most widely used JavaScript libraries in...
The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering...