The most widely used JavaScript HTTP library on the internet — embedded in millions of production applications, relied on by ...
Forty-five million weekly downloads. One compromised maintainer. Three hours of exposure before anyone noticed.
Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.
Two CISOs dissect the Axios npm attack, revealing a self-erasing RAT, CI/CD compromise risks and why open-source software ...