Axios supply chain attack hits library with 400M monthly downloads

A major supply chain attack targeting the widely used Axios JavaScript library briefly exposed developers to a stealthy remote access trojan (RAT). The incident unfolded between March 30 and March 31, 2026, when threat actors gained control of the npm account belonging to Axios maintainer jasonsaayman. Researchers from Socket and independent analysts identified that two …

The post Axios supply chain attack hits library with 400M monthly downloads appeared first on CyberInsider.