Hacker-City
Hacker-City
Get the brief
Technology|March 31, 2026|1 min read

Supply Chain Attack Compromises Popular HTTP Client Axios

A malicious dependency was introduced into specific npm releases of Axios, a widely used HTTP client with 100 million weekly downloads.

#Axios#supply chain attack#npm#cybersecurity#malware

Supply Chain Attack Compromises Popular HTTP Client Axios

A significant supply chain attack has been identified, affecting Axios, an HTTP client library that garners approximately 100 million downloads from npm each week. Recent findings from the Socket Research Team indicate that a malicious dependency has been inserted into specific npm releases of Axios, which triggers a multi-stage payload that includes a remote access trojan (RAT).

This incident raises critical concerns within the developer community, given that such libraries are widely employed in a multitude of applications across the globe.

The versions affected include [email protected] and [email protected]. Developers are urged to review their dependencies promptly and update to secure versions.

Numerous sources have elaborated on the nature and consequences of the attack, including:

For developers using Axios, it is imperative to take immediate action to mitigate any potential risks.

Share this story

Next story

Axios NPM Package Compromised in Supply Chain Attack

A major supply chain attack has compromised the HTTP client Axios, affecting millions of developers and introducing a malicious dependency into certain npm releases.