Axios compromised on NPM – Malicious versions drop remote access trojan(stepsecurity.io)
1891 points by mtud | 763 comments
StepSecurity blog post reporting that a hijacked maintainer account published malicious axios versions 1.14.1 and 0.30.4 on npm that drop a cross-platform RAT.

















































![Screenshot of quantumai.google: Securing Elliptic Curve Cryptocurrencies Against Quantum Vulnerabilities [pdf]](https://hn.urlbox.com/shots/renders/2026/3/31/ce470e64-19e4-40a9-bda8-9b836c481856.jpg)



![Screenshot of youtube.com: Why Inventing Color TV Was So Difficult [video]](https://hn.urlbox.com/shots/renders/2026/4/4/818d10f8-5704-4b75-b5aa-f095f9207058.jpg)





