As cited
Copy frozen at (site build).
breaches incidents
Axios NPM Distribution Compromised in Supply Chain Attack
A maintainer account for the popular axios library was compromised, resulting in malicious packages published to the npm registry. The incident affected multiple environments through the compromised supply chain dependency.
Why it matters: Development teams using axios need to immediately audit their dependency versions and runtime environments to detect and remediate potential compromises, as the malicious packages could have executed arbitrary code during installation or runtime.
- Source published
- First seen by Cybersecurity Tracker