RSS Bot@lemmy.bestiver.seBM to Hacker News@lemmy.bestiver.seEnglish · 29 days ago

Post Mortem: axios NPM supply chain compromise

1

cross-posted to:
blueteamsec@infosec.pub

17

Post Mortem: axios NPM supply chain compromise

RSS Bot@lemmy.bestiver.seBM to Hacker News@lemmy.bestiver.seEnglish · 29 days ago

1

cross-posted to:
blueteamsec@infosec.pub

Post Mortem: axios npm supply chain compromise · Issue #10636 · axios/axios

Post Mortem: axios npm supply chain compromise Date: March 31, 2026 Author: Jason Saayman Status: Remediation in progress On March 31, 2026, two malicious versions of axios (1.14.1 and 0.30.4) were...

You must log in or # to comment.

Chat

sun_is_ra@sh.itjust.works
link
fedilink
English
arrow-up
2·
29 days ago
Luckily the whole thing only lasted 3 hours. Hopefully not so much damage has happened

Hacker News@lemmy.bestiver.se

hackernews@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

439 users / day
2K users / week
4.56K users / month
9.71K users / 6 months
51 local subscribers
4.81K subscribers
43.6K Posts
24.5K Comments
Modlog