Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...
It's unclear how widespread the damage is from the recent axios hack involving North Korean malware, Microsoft Teams, Slack, and weeks of preparation.
Security companies flagged [email protected] and 0.30.4 as compromised, urging credential rotation and rollback of affected packages. Update March 31, 2026, 1:28 pm UTC: This article has been updated to ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results