Axios npm Packages Compromised in Supply Chain Attack
31/03/2026-07:44 31/03/2026-07:45 מחשבים וטכנולוגיה CyberSec Guru דיווח
TL:DR: Malicious versions of Axios (1.14.1 and 0.30.4) hit the npm registry yesterday. They carry a malware dropper called [email protected]. If you ran npm install in the last 24 hours, check your lockfile. Roll back to 1.14.0 and rotate every c