SiliconANGLE

Hackers compromise popular Axios Javascript library with hidden malware

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...
Dark Reading

Axios NPM Package Compromised in Precision Attack

The Axios JavaScript NPM package was recently compromised, representing one of the highest impact supply chain attacks against the open source development ecosystem in recent months. Axios is the most ...
Help Net Security

Axios npm packages backdoored in supply chain attack

On March 30, 2026, with an account using a separate throwaway ProtonMail address, the attacker published on NPM a trojanized copy of the popular crypto-js JavaScript library of crypto standards. This ...
Cointelegraph

Supply chain attack hits Axios npm releases, users urged to rotate keys

Security companies flagged axios@1.14.1 and 0.30.4 as compromised, urging credential rotation and rollback of affected packages. Update March 31, 2026, 1:28 pm UTC: This article has been updated to ...
テックターゲットジャパン

1億DL超のaxiosも標的 Amazonが警告する北朝鮮発のサプライチェーン攻撃の実態：主要npmライブラリ4種を標的に

米Amazonの脅威調査チームは、Node Package Manager（npm）ライブラリの4つの異なる改ざんについて、北朝鮮政府が支援する脅威アクターによるものだと高い確信を持って断定した。 バージニア州 ...
Estadão on MSN

Hackers norte-coreanos atacaram apenas uma pessoa para comprometer Axios e NPM

Atacantes ligados à Coreia do Norte criaram uma empresa falsa no Slack, agendaram uma reunião e enganaram o mantenedor ...