Axios npm Supply Chain Attack: How Malicious Versions Delivered RAT via Install Scripts
On March 31, 2026, the JavaScript ecosystem faced one of its most significant supply chain attacks when malicious versions of the axios HTTP client library were published to npm. These compromised...