Record · corpus.blog/posts/01a07df5-49ee-7218-91aa-008e39839ff8

Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT

Snyk · published 30 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture

4blogs citing

First cited: 31 Mar 2026
Most recent: 22 May 2026
Rank this month: not ranked
Links from this post: 16
Words captured: 1,855

Cited by

Blog

In the post

Date

radval.me

npm install and pray. Axios and TanStack, 2026. Read at the source ↗

22 May 2026

Varnish Software Blog

CISA Alert: Axios NPM Supply Chain Compromise (April 2026): How to Protect Your CI/CD Pipelines Read at the source ↗

22 Apr 2026

benlapid.us

The (Actually) Scary Parts of Tech in 2026 Read at the source ↗

11 Apr 2026

smsk.dev

npm install is not your friend either — The Axios Supply Chain Attack Read at the source ↗

31 Mar 2026

Links from this post

Link

Host

https://snyk.io/advisor/npm-package/axios

snyk.io

https://security.snyk.io/vuln/SNYK-JS-AXIOS-15850650

security.snyk.io

https://security.snyk.io/vuln/SNYK-JS-PLAINCRYPTOJS-15850652

security.snyk.io

https://github.com/axios/axios/issues/10604

github.com

https://security.snyk.io/vuln/SNYK-JS-QQBROWSEROPENCLAWQBOT-15850776

security.snyk.io

https://security.snyk.io/vuln/SNYK-JS-SHADANAIOPENCLAW-15850775

security.snyk.io

https://snyk.io/articles/poisoned-security-scanner-backdooring-litellm/

snyk.io

Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack Read at the source ↗

snyk.io

https://github.com/lirantal/npq

github.com

https://github.com/lirantal/npm-security-best-practices

github.com

Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware Read at the source ↗

snyk.io

npm Supply Chain Attack via Open Source maintainer compromise Read at the source ↗

snyk.io

SHA1-Hulud, npm supply chain incident Read at the source ↗

snyk.io

NPM security: preventing supply chain attacks Read at the source ↗

snyk.io

Why npm lockfiles can be a security blindspot for injecting malicious modules Read at the source ↗

snyk.io

https://learn.snyk.io/lesson/compromise-of-legitimate-package/

learn.snyk.io