El Mapache (@trashp4ndasec.bsky.social)

Major Axios Supply Chain Attack Threatens Millions of npm Projects A critical supply chain attack is currently targeting Axios, one of the most depended-on packages in the NPM registry, which hosts over two million open-source JavaScript packages. According to security expert Feross Aboukhadijeh, the compromised [email protected] version pulls in a malicious dependency called [email protected], which did not exist before the attack. The malware can delete […] https://satoshisbrain.com/major-axios-supply-chain-attack-threatens-millions-of-npm-projects/