#axios-supply-chain-attack

Open Source

North Korean Hackers Fake a Company to Pwn Axios Maintainer – RAT in 100M Downloads

Picture this: a Teams call with 'colleagues' from a polished fake company. One 'update' click later, North Koreans control your machine and poison a library with 100 million downloads. Open source just got conned.

New Releases

Axios 1.14.1: The NPM Hijack That Stole Your SSH Keys in Seconds

Ever wonder if that quick 'npm install axios@latest' just handed your AWS keys to a stranger? On March 31, 2026, it did—for 40 million weekly users.