axios npm supply - Robuta Search

https://ramimac.me/axios/ Axios npm Supply Chain Attack Apr 6, 2026 - Timeline and IOCs for the Axios npm supply chain attack. Compromised maintainer account, credential stealer via plain-crypto-js dependency. axios npm supply chain attack https://thehackernews.com/2026/04/google-attributes-axios-npm-supply.html Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069 Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, impacting multiple OS. axios npm supply chain attack north korean google attributes https://github.com/axios/axios/issues/10636 Post Mortem: axios npm supply chain compromise · Issue #10636 · axios/axios · GitHub Post Mortem: axios npm supply chain compromise Date: March 31, 2026 Author: Jason Saayman Status: Remediation in progress On March 31, 2026, two malicious... axios npm supply post mortem chain compromise issue 10636 https://www.huntress.com/blog/axios-npm-compromise Tradecraft Tuesday Recap: axios npm Supply Chain Compromise | Huntress A few weeks after the major axios npm supply chain attack, a group of researchers from Huntress, Wiz, and Aikido Security debriefed on the compromise’s lasting... axios npm supply tuesday recap chain compromise tradecraft huntress https://www.helpnetsecurity.com/2026/04/05/week-in-review-axios-npm-supply-chain-compromise-critical-forticlient-ems-bug-exploited/ Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited - Help... Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Financial groups lay out a plan to fight AI identity axios npm supply chain compromise forticlient ems week review https://www.tenable.com/blog/faq-about-the-axios-npm-supply-chain-attack-by-north-korea-nexus-threat-actor-unc1069 Axios npm Supply Chain Attack FAQ: North Korea UNC1069 | Tenable® Apr 7, 2026 - North Korea-nexus threat actor UNC1069 compromised the axios npm package, delivering the WAVESHAPER.V2 RAT to macOS, Windows, and Linux systems. axios npm supply chain attack faq north korea unc1069 https://www.tenable.com/blog/supply-chain-attack-on-axios-npm-package-scope-impact-and-remediations Axios npm supply chain attack | Tenable® Apr 7, 2026 - The attacker injected a malicious package called “plain-crypto-js” into the dependency tree of Axios versions 1.14.1 and 0.30.4. Scan your environment now to... axios npm supply chain attack https://www.helpnetsecurity.com/2026/04/01/north-korean-hackers-linked-to-axios-npm-supply-chain-compromise/ North Korean hackers linked to Axios npm supply chain compromise - Help Net Security The supply chain attack that lead to the compromise of Axios npm packages is likely the work of financially-motivated North Korean attackers. north korean hackers axios npm supply chain compromise linked help https://netrouting.com/axios-npm-attack-ci-cd-security-risk/ Axios npm Supply Chain Attack: CI/CD & Infrastructure Risk Explained Apr 6, 2026 - Axios npm attack exposes CI/CD risks. Learn how dependency installs can compromise infrastructure and how to secure your pipelines. axios npm supply chain attack ci cd risk explained infrastructure https://www.tomshardware.com/tech-industry/cyber-security/axios-npm-package-compromised-in-supply-chain-attack-that-deployed-a-cross-platform-rat One of JavaScript's most popular libraries compromised by hackers — Axios npm package hit in supply... Mar 31, 2026 - The hijacked maintainer account was used to publish two malicious versions of one of JavaScript's most popular libraries. axios npm package one javascript popular libraries https://gbhackers.com/cisa-warns-compromised-axios-npm-package/ CISA Warns Compromised Axios npm Package Fueled Major Supply Chain Attack Apr 21, 2026 - CISA has issued an urgent alert regarding a severe software supply chain compromise affecting the widely used Axios node package manager (npm). axios npm package supply chain attack cisa warns compromised fueled https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying cross-platform RAT malware. axios supply chain cross platform rat via compromised attack pushes https://www.helpnetsecurity.com/2026/03/31/axios-npm-backdoored-supply-chain-attack/ Axios npm packages backdoored in supply chain attack - Help Net Security Mar 31, 2026 - An attacker has published backdoored Axios npm packages that trigger the installation of droppers and remote access trojans. supply chain attack axios npm packages backdoored help https://www.trendmicro.com/en_us/research/26/c/axios-npm-package-compromised.html Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly... axios npm package supply chain attack http client compromised hits https://www.infoq.com/news/2026/04/axios-supply-chain/ Axios npm Package Compromised in Supply Chain Attack - InfoQ Apr 2, 2026 - On March 31, 2026, two versions of the Axios library were compromised and found to contain a Remote Access Trojan. The malicious packages were published... axios npm package supply chain attack compromised infoq https://thehackernews.com/2026/04/unc1069-social-engineering-of-axios.html UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply chains. npm supply chain social engineering unc1069 axios maintainer https://it.slashdot.org/story/26/04/05/0316250/top-npm-maintainers-targeted-with-ai-deepfakes-in-massive-supply-chain-attack-axios-briefly-compromised Top NPM Maintainers Targeted with AI Deepfakes in Massive Supply-Chain Attack, Axios Briefly... supply chain attack top npm maintainers targeted