
Poisoned Axios Package Linked To Cross-Platform Malware Delivery Campaign
On March 30, 2026, the JavaScript ecosystem faced a massive software supply chain attack. Axios, the most popular HTTP client with over one hundred million weekly downloads, was weaponized to deliver a cross-platform Remote Access Trojan. Attackers successfully hijacked the package manager account of the project’s lead maintainer, enabling them to publish malicious versions of […] The post Poisoned Axios Package Linked To Cross-Platform Malware Delivery Campaign appeared first on Cyber Security News.