Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social engineering campaign believed to have been ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results