Axios attack: How a compromised npm package delivered RAT malware

axios npm Package Compromised: Versions 1.14.1 and 0.30.4 Contain RAT Malware

axios versions 1.14.1 and 0.30.4 were compromised on npm between March 30-31, 2026, with a malicious dependency that drops a remote access t

Compromised axios npm package delivers cross-platform RAT

Major NPM Supply Chain Attack: Over 1,000 Packages Infected via Fake Bun Runtime

A major cybersecurity incident occurred where over 1,000 NPM packages and 27,000+ GitHub repositories were infected within hours via a fake

Red Hat npm supply chain attack compromises 32 packages with credential-stealing malware

A supply chain attack targeted Red Hat's npm namespace (@redhat-cloud-services), with 96 compromised versions across 32 packages backdoored

NPM Vulnerability Allows 126 Malicious Packages to Be Downloaded 86,000+ Times

Security researchers have discovered a major vulnerability in NPM (Node Package Manager) that allows attackers to distribute malicious packa

Snyk uncovers malicious code activities in open source supply chain security on the npm registry