Sponsor of the Day:
Jerkmate
https://laravel-news.com/axios-npm-package-compromised-with-remote-access-trojan
Axios npm Package Compromised With Remote Access Trojan - Laravel News
Apr 3, 2026 - Malicious versions of the axios HTTP client were published to npm on March 31, 2026, deploying a cross-platform remote access trojan via a fake dependency.
axios npm packageremote access trojanlaravel newscompromised
https://www.tomshardware.com/tech-industry/cyber-security/axios-npm-package-compromised-in-supply-chain-attack-that-deployed-a-cross-platform-rat
One of JavaScript's most popular libraries compromised by hackers — Axios npm package hit in supply...
Mar 31, 2026 - The hijacked maintainer account was used to publish two malicious versions of one of JavaScript's most popular libraries.
axios npm packageonejavascriptpopularlibraries
https://gbhackers.com/cisa-warns-compromised-axios-npm-package/
CISA Warns Compromised Axios npm Package Fueled Major Supply Chain Attack
Apr 21, 2026 - CISA has issued an urgent alert regarding a severe software supply chain compromise affecting the widely used Axios node package manager (npm).
axios npm packagesupply chain attackcisa warnscompromisedfueled
https://securitylabs.datadoghq.com/articles/axios-npm-supply-chain-compromise/
Compromised axios npm package delivers cross-platform RAT | Datadog Security Labs
An attacker hijacked an axios maintainer's npm account to publish malicious releases that deliver a cross-platform RAT.
axios npm packagecross platform ratdatadog security labscompromiseddelivers
https://www.trendmicro.com/en_us/research/26/c/axios-npm-package-compromised.html
Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly...
axios npm packagesupply chain attackhttp clientcompromisedhits
https://www.infoq.com/news/2026/04/axios-supply-chain/
Axios npm Package Compromised in Supply Chain Attack - InfoQ
Apr 2, 2026 - On March 31, 2026, two versions of the Axios library were compromised and found to contain a Remote Access Trojan. The malicious packages were published...
axios npm packagesupply chain attackcompromisedinfoq
https://daringfireball.net/linked/2026/04/02/axios-attack
Daring Fireball: Axios, Super Popular NPM Package, Was Compromised in Attack on the Module's...
Link to: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
daring fireballsuper popularnpm packageaxioscompromised
https://www.sonatype.com/blog/axios-compromise-on-npm-introduces-hidden-malicious-package
Axios Compromise on npm Introduces Hidden Malicious Package
Apr 2, 2026 - Malicious axios versions introduced a hidden dependency, exposing systems via npm supply chain attack, targeting trusted packages and dependencies.
axioscompromisenpmintroduceshidden