Attackers compromised the maintainer's token for the popular Axios library to distribute a remote access trojan. Given its integration in 80% of cloud environments, the breach poses a significant supply chain threat.
Kenji··1 min read
The popular axios npm library was compromised by hackers who injected a cross-platform trojan, affecting millions of cloud and code environments. Experts warn enterprises to urgently audit their dependencies and tighten supply chain security.
Kenji··1 min read
The widely-used Axios library was compromised when an attacker stole a maintainer's npm token, pushing malicious versions containing a remote access trojan. The incident underscores the severe risks inherent in modern software supply chain trust.
Kenji··2 min read