Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
Anthropic's Claude Code CLI had its full TypeScript source exposed after a source map file was accidentally included in ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...