software-supply-chain
Latest stories covering software-supply-chain, with summaries and links to related coverage.
1 articles · page 1 of 1
Connected topics
Axios compromised on NPM – Malicious versions drop remote access trojan
news
17 min read
Two malicious versions of the axios HTTP client library, axios@1.14.1 and axios@0.30.4, were published to npm using compromised credentials of a lead maintainer. The attacker altered the maintainer's email to a ProtonMail address and manually published the malicious packages, which included a remote access Trojan.