Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
What an ol' classic in the age of AI!
https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.htmlOpen linkView original on sh.itjust.worksSyndicated from the fediverse. Read and engage on the original instance.
View original on sh.itjust.workshttps://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.htmlOpen linkView original on sh.itjust.works
3 replies
It gets better and better lol
I always advocate switching to
pnpmwhere install scripts are disabled by default. It has plenty of security features to ward off most supply chain attacks.Pre and post install hooks are a mistake, jfk