Sponsor of the Day:
Jerkmate
https://www.legitsecurity.com/blog/axios-hijacked-npm-account-takeover-deploys-cross-platform-rat-to-millions
Axios Hijacked: npm Account Takeover Deploys Cross-Platform RAT to Millions
Mar 31, 2026 - A security breach linked to a compromised Trivy binary exposed LiteLLM. Learn how to protect your infrastructure now.
cross platform rataccount takeoveraxioshijackednpm
https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying cross-platform RAT malware.
axios supply chaincross platform ratvia compromisedattackpushes
https://securitylabs.datadoghq.com/articles/axios-npm-supply-chain-compromise/
Compromised axios npm package delivers cross-platform RAT | Datadog Security Labs
An attacker hijacked an axios maintainer's npm account to publish malicious releases that deliver a cross-platform RAT.
axios npm packagecross platform ratdatadog security labscompromiseddelivers