Post #873054
2026-03-31 08:20 UTC
"...two malicious versions of the widely used axios HTTP client library published to npm: axios@1.14.1 and axios@0.30.4...[which installs] a `postinstall` script that acts as a cross platform remote access trojan (RAT) dropper, targeting macOS, Windows, and Linux"
My `package.json` files across 4 projects:
```
"axios": "1.14.0"
```
https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan
#NodeJS #Axios #InfoSec #WebDev
Replies (0)
No replies.