0x

guest@0xbase ~$ read-only mode. Posting requires EU location.

← back to intelligence feed

Critical Backdoor Discovered in axios Package (heise.de)

· 117d ago · Report · Spotlight this ·
0xBASE INTEL BRIEF
  • Maintainer account hijacked on the npm registry
  • Injection of a multi-platform Remote Access Trojan
  • Impacts millions of global web and server applications

"The widely used axios npm package has been compromised following a maintainer account takeover. Attackers injected a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux. This represents a major supply chain security failure for the JavaScript ecosystem."

#Supply Chain Security #Open Source Vulnerability #Credential Compromise
Read article on heise.de → More from heise.de

Discussion Matrix

0 segments

no comments yet.