Axios JavaScript library has been compromised with malware in supply chain attack

github.com

Axios JavaScript library has been compromised with malware in supply chain attack

github.com

cm0002 to

Opensource@programming.dev · 13 hours ago

axios@1.14.1 and axios@0.30.4 are compromised · Issue #10604 · axios/axios

github.com

more details: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan Most likely, a maintainer's GitHub and npm accounts are compromised as these iss...

You must log in or # to comment.

Chat

Opensource@programming.dev

opensource@programming.dev

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !opensource@programming.dev

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

Credits

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

83 users / day
459 users / week
1.89K users / month
5.95K users / 6 months
14 local subscribers
5.84K subscribers
1.26K Posts
3.95K Comments
Modlog