Supply Chain Attack on Axios Pulls Malicious Dependency from npm

2026-04-01

A supply chain attack inserted a malicious dependency into certain Axios npm versions, enabling a remote access trojan that can execute commands and steal data.