Cisco Talos, SANS, Qualys, and Trend Micro describe malicious Axios releases that harvested credentials and deployed cross platform malware, urging dependency tree checks because transitive installs were affected and artifacts were deleted after execution.
Cisco Talos is actively investigating the March 31, 2026 supply chain attack on the official Axios NPM package:
If you haven't checked your dependency tree for axios v1.14.1 or v0.30.4 yet, transitive installs included, do it today.
The package is gone. The harvested credentials are not.
A supply chain attack has compromised Axios versions 1.14.1 and 0.30.4 to deploy a cross-platform Remote Access Trojan (RAT).
Malicious Axios releases deployed cross‑platform malware on macOS, Windows, and Linux, then deleted visible artifacts after execution.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security