StepSecurity Blog company blog
Axios compromised on NPM – Malicious versions drop remote access trojan
Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.
- Points
- 1,934
- HN comments
- 807
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyInfrastructure & DevOps2026
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Mar 31, 2026 | Axios compromised on NPM – Malicious versions drop remote access trojan by mtud | 1,934 | 807 |
