Axios npm compromise traced to targeted social engineering attack

The recent compromise of the widely used Axios npm package has been confirmed as the result of a targeted social engineering attack. The incident, which briefly exposed developers to malicious code, highlights growing risks within the open-source software supply chain. On March 31, attackers managed to publish two malicious versions of Axios to npm. These […]

The post Axios npm compromise traced to targeted social engineering attack appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.