Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
It hides inside developer tools, then monitors activity and steals data, turning a single infection into a wider risk across ...
AtlasCross RAT spreads via 11 fake domains registered October 27, 2025, enabling encrypted C2 control and persistence.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results