Axios JavaScript library has been compromised with malware in supply chain attack

github.com

cross-posted to:
selfhosted@lemmy.world

Axios JavaScript library has been compromised with malware in supply chain attack

github.com

cm0002@europe.pub to

Opensource@programming.dev · 17 days ago

cross-posted to:
selfhosted@lemmy.world

axios@1.14.1 and axios@0.30.4 are compromised · Issue #10604 · axios/axios

github.com

more details: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan Most likely, a maintainer's GitHub and npm accounts are compromised as these iss...

You must log in or # to comment.

Chat

Opensource@programming.dev

opensource@programming.dev

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !opensource@programming.dev

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

Credits

Icon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

94 users / day
486 users / week
1.57K users / month
5.96K users / 6 months
1 local subscriber
5.94K subscribers
1.39K Posts
4.46K Comments
Modlog