The popular HTTP client known as Axios has suffered a supply chain attack after two newly published versions of the npm package introduced a malicious dependency that delivers a trojan capable of ...
Axios disclosed two high-severity HTTP/2 flaws that could bypass network controls or crash Node.js applications.
On March 30, 2026, the JavaScript ecosystem faced a massive software supply chain attack. Axios, the most popular HTTP client with over one hundred million weekly downloads, was weaponized to deliver ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. One malicious ...
Two weeks ago, a suspected North Korean threat actor slipped malicious code into a package within Axios, a widely used JavaScript library. The immediate concern was the blast radius: roughly 100 ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...
Security companies flagged axios@1.14.1 and 0.30.4 as compromised, urging credential rotation and rollback of affected packages. Update March 31, 2026, 1:28 pm UTC: This article has been updated to ...
A supply-chain attack affecting Axios, the popular JavaScript library, traced back to DPRK threat activity. (Image: Shutterstock) A supply-chain attack that compromised versions of Axios to distribute ...
Axios maintainers have disclosed a cluster of security vulnerabilities affecting the widely deployed JavaScript HTTP client, including flaws that can enable server-side request forgery, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results