npm

Breaking Technology

Axios npm Attack Exposes Critical Flaw in Open-Source Security Model

Compromised maintainer credentials bypassed GitHub protections to inject remote-access trojan into package with 100 million weekly downloads, revealing systemic npm governance failure.

8 min read ·
Breaking Technology

Axios HTTP Library Compromised in Sophisticated npm Supply Chain Attack

Malicious versions of JavaScript's most-used HTTP client deployed cross-platform RAT to 83 million weekly downloads via hijacked maintainer account.

8 min read ·