3
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity (www.stepsecurity.io)
submitted 7 months ago by to c/techsploits@reddthat.com
1 comment fedilink hide all child comments
 

Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.

1 comment

sorted by: hot top controversial new old
[–] [S] 1 point 7 months ago

If you were compromised follow the recovery steps mentioned in the article to reduce the damage.

Here's the hacker news discussion: https://news.ycombinator.com/item?id=47582220

  • permalink
  • fedilink
  • source
    •