Hackers compromise Axios npm package to drop cross-platform malware
Over Security - Cybersecurity news aggregator [Unofficial]
March 31, 2026
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems.
Discussion in the ATmosphere