Axios JavaScript library has been compromised with malware in supply chain attack

github.com

Axios JavaScript library has been compromised with malware in supply chain attack

github.com

cm0002@europe.pub to

Opensource@programming.dev · 12 days ago

axios@1.14.1 and axios@0.30.4 are compromised · Issue #10604 · axios/axios

github.com

more details: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan Most likely, a maintainer's GitHub and npm accounts are compromised as these iss...

You must log in or # to comment.

Chat

Opensource@programming.dev

opensource@programming.dev

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !opensource@programming.dev

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

Credits

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

117 users / day
468 users / week
484 users / month
488 users / 6 months
1 local subscriber
5.92K subscribers
77 Posts
133 Comments
Modlog