Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Dark Reading

Axios NPM Package Compromised in Precision Attack

The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...
Techzine

axios npm-package gekaapt, vormt nieuw supply chain-gevaar

Axios op npm besmet: versies 1.14.1 en 0.30.4 installeren een cross-platform RAT via een gekaapt maintaineraccount. Downgrade ...
Tweakers

Veelgebruikte axios-library gebruikt voor supplychainaanval via npm-packages

De veelgebruikte axios-library voor JavaScript-code is gehackt en wordt gebruikt voor een supplychainaanval. Gebruikers van ...
Developer Tech

Axios npm attack causes JavaScript supply chain chaos

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
Bleeping Computer

Compromised JavaScript Package Caught Stealing npm Credentials

A hacker has gained access to a developer's npm account and injected malicious code into a popular JavaScript library, code that was designed to steal the npm credentials of users who utilize the ...
ZDNet

Microsoft buys JavaScript developer platform npm; plans to integrate it with GitHub

Microsoft is acquiring Node package manager npm Inc., officials announced on March 16. (Neither company is sharing the purchase price.) Microsoft plans to integrate GitHub with npm with the intent of ...