BleepingComputer

Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. One malicious ...
Dark Reading

Axios NPM Package Compromised in Precision Attack

The Axios JavaScript NPM package was recently compromised, representing one of the highest impact supply chain attacks against the open source development ecosystem in recent months. Axios is the most ...
bankinfosecurity

Backdooring of JavaScript Library Axios Tied to North Korea

A supply-chain attack affecting Axios, the popular JavaScript library, traced back to DPRK threat activity. (Image: Shutterstock) A supply-chain attack that compromised versions of Axios to distribute ...
Cointelegraph

Supply chain attack hits Axios npm releases, users urged to rotate keys

Security companies flagged axios@1.14.1 and 0.30.4 as compromised, urging credential rotation and rollback of affected packages. Update March 31, 2026, 1:28 pm UTC: This article has been updated to ...
GIGAZINE

Google has identified North Korean hacker group 'UNC1069' as the perpetrators of a supply chain attack against the open-source Axios.

Google's security researchers have submitted a report investigating the Axios JavaScript library's supply chain attack that resulted in the installation of a remote access Trojan. Google has concluded ...

ソフトウェアサプライチェーン攻撃、pnpmで第一の防衛線を築く

こんにちは。Inflabのバックエンド開発者、Hoonyです。 最近、サプライチェーン攻撃（Supply-Chain-Attack）によるセキュリティインシデントが相次いでいます。今年の初めに最も話題になったLiteLLMのサプライチェーン攻撃事件から、 JavaScriptエコシステムで最も広く使われているHTTPクライアントライブラリであるAxiosのパッケージ配布経路の汚染まで、本当に多くの ...
vc.ru

Node.js встроил замену axios, nodemon, dotenv и Jest

Node.js встроенные API для тестирования, HTTP-запросов, перезапуска приложений, загрузки .env, парсинга CLI, статус и ограничения в Node 24 ...