3
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity (www.stepsecurity.io)
submitted 5 months ago by limerod@reddthat.com to c/techsploits@reddthat.com
1 comments fedilink hide all child comments

Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.

top 1 comments
sorted by: hot top new old
[-] limerod@reddthat.com 1 points 5 months ago

If you were compromised follow the recovery steps mentioned in the article to reduce the damage.

Here's the hacker news discussion: https://news.ycombinator.com/item?id=47582220

this post was submitted on 01 Apr 2026
3 points (100.0% liked)

TechSploits

505 readers
1 users here now

All things relating to breaking tech, tech breaking, OSS, or hacking together software to perform something completely out of the ordinary, on purpose or by accident.

founded 3 years ago
MODERATORS
reddthat@reddthat.com