Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks.

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions of the widely used JavaScript HTTP client library.

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and Linux.

Media OutReach Newswire Appoints Pamela Phua as Managing Partner, Southeast Asia to Champion Singapore and Southeast Asian ...