> Axios npm Package Compromised
[DATE: 14/04/2026 07:00]
[LANGUAGE: EN]
On March 31, 2026, the Axios npm package was compromised via a maintainer account takeover. Two malicious versions were published - [email protected] and [email protected] - which introduced a hidden dependency ([email protected]) able to execute a post‑install script deploying a cross‑platform Remote Access Trojan (RAT) on Windows, macOS, and Linux systems.
Revised on 2026-04-14 00:00:00