TLDR Tech / IT
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
Attackers compromised an Axios maintainer account and published malicious versions that injected a hidden dependency executing a cross-platform RAT during installation—impacting macOS, Windows, and Linux. The impact is severe: any CI/CD pipeline or developer environment pulling the affected versions could be silently compromised, with attackers gaining access to credentials, tokens, and downstream systems without modifying application code.
Read the full story