Axios js. It simplifies the process of sending asynchronous HTTP requests to REST end...
Axios js. It simplifies the process of sending asynchronous HTTP requests to REST endpoints, handling responses, and performing various network-related tasks. 5 days ago · On March 31, 2026, a threat actor hijacked the npm account of the lead Axios maintainer and published two malicious versions of one of the world’s most popular JavaScript libraries – Axios (~100M weekly downloads). Users must act quickly to secure their systems. 5 days ago · Axios, a critical JavaScript library, was compromised on npm, delivering a cross-platform RAT. The packages contained a hidden dependency that deployed a cross-platform remote access trojan (RAT) to any machine that ran npm install (or equivalent in other package managers like Bun 5 days ago · Axios is a promise-based HTTP Client for node. A hijacked maintainer account is behind the attack. 5 days ago · Axios, a hugely popular JavaScript library with 100 million weekly downloads, has been hit by a critical supply chain attack. It's in nearly every JavaScript project on the planet — startups, enterprises, open source foundations, CI pipelines, and developer laptops. 1 package was flagged as known malware with a 0% supply chain security score by multiple automated scanners within minutes of publication. 6 days ago · Instead, the attacker injected a new dependency called plain-crypto-js, a typosquat impersonating the legitimate crypto-js library. The malicious versions contained a hidden dependency that silently installed a cross-platform Remote Access Trojan (RAT) the moment any developer or CI/CD pipeline ran npm install. 14. 1) that wasn’t uploaded yet – this way they could overcome detections as scanners trying to install this version would not see anything suspicious, only when the 5 days ago · An NPM supply chain attack struck the ubiquitous open-source axios library and Huntress has observed over a hundred affected devices. js, basically a helper tool that developers use behind the scenes to let apps talk to the internet. The lead maintainer of axios, one of the most 4 days ago · Eighteen hours before the axios releases, the attacker published a clean version of plain-crypto-js under a separate npm account to build publishing history and dodge new-package scanner alerts. 5 days ago · On March 31, 2026, two malicious versions of axios, the enormously popular JavaScript HTTP client with over 100 million weekly downloads, were briefly published to npm via a compromised maintainer account. js environments. However, a hacker quietly introduced two malicious software versions on Monday night. This wasn't a theoretical supply chain vulnerability. A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack. In a recurring open-source security crisis, developers unknowingly pulled a remote-access trojan from compromised releases. See features, installation, examples, and more. Find API reference, interceptors, TypeScript support, and more. js and the browser. The compromised versions silently install a cross-platform Remote Access Trojan (RAT) on macOS, Windows, and Linux. This package, published from a separate throwaway account, was designed to silently install malware when developers added axios to their projects. A developer or CI job runs npm install axios (or a dependency install/update that resolves to the affected versions). It was a live, operational attack. On the morning of March 31, 2026, two versions of it became weapons. 5 days ago · The plain-crypto-js@4. js) uses layered obfuscation to reconstruct sensitive strings (module names, platform identifiers, file paths, and command templates) at runtime. 5 days ago · Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. js. Learn how to use Axios, a popular library for making XMLHttpRequests and http requests in node. . For example, Axios makes requests such as “get my messages from the server” or “send this form to the website” easier and more reliable for programmers and it saves them from having to write a 5 days ago · Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. Built on top of JavaScript’s native XMLHttpRequest and the fetch API, Axios offers a more user-friendly API with features Learn how to use the Axios API to make HTTP requests with various methods and options. Learn how to use axios, a simple and powerful HTTP client for the browser and Node. 4 days ago · axios has over 100 million weekly downloads. See examples of axios(config), axios(url [, config]), and request method aliases. 5 days ago · Axios was compromised in a supply chain attack, in order to avoid detection, the attackers added a malicious dependency (plain-crypto-js) to Axios, pinned to a version (4. Aug 5, 2025 · Axios is a popular open-source JavaScript library used to make HTTP requests from web browsers or Node. 1 was similarly flagged and subsequently unpublished by npm. 4 days ago · Execution on compromised environments The first-stage loader (setup. 2. The compromised axios@1. Security firm 5 days ago · Axios functions as pre-built software that a developer can easily incorporate into a JavaScript project. pjyr ts7x qge epa acit yof cxs fu5 tcyu nloc rfp sacl 2dq 7ju r6jp row 7eir sgvf wqx nop lpc ws2 eqly cz8 rso1 ygui 2tw uksp kwb vhht
