Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

Two malicious Axios npm releases have prompted warnings for developers to rotate credentials and treat affected systems as ...

Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...

Node-forge cryptography library flaw (CVE-2025-12816) allowed bypass of signature and certificate validation CERT-CC warns of risks including authentication bypass and signed data tampering ...