Axios JavaScript library has been compromised with malware in supply chain attack

github.com

Axios JavaScript library has been compromised with malware in supply chain attack

github.com

cm0002@europe.pub to

Opensource@programming.dev · 2 months ago

axios@1.14.1 and axios@0.30.4 are compromised · Issue #10604 · axios/axios

github.com

more details: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan Most likely, a maintainer's GitHub and npm accounts are compromised as these iss...

You must log in or # to comment.

Chat

Opensource@programming.dev

opensource@programming.dev

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !opensource@programming.dev

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

Credits

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

5 users / day
278 users / week
1.11K users / month
2.71K users / 6 months
1 local subscriber
6.16K subscribers
855 Posts
1.51K Comments
Modlog