North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...
What makes this attack so unsettling is that all the hackers had to do was just steal the password of one of the axios maintainers.
'This is unironically a malware nuclear missile.' ...
A compromise of the widely used Axios software package has triggered fresh concern over open-source security after attackers used a hijacked maintainer account to publish poisoned versions carrying ...
Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer ...
Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results