🚨 SECURITY ALERT: AXIOS COMPROMISED 🚨

A supply chain attack hit axios on March 31. This is not a drill for developers using JS/TS.

The Malicious Versions: ❌ 1.14.1 ❌ 0.30.4

These versions install a silent RAT via a hidden dependency (plain-crypto-js), targeting Linux, macOS, and Windows.

👇 HOW TO CHECK & FIX 👇

1️⃣ Check infection: Run npm ls axios in all your projects.

2️⃣ Remediate IMMEDIATELY: If you see the bad versions, your machine is compromised.

• Wipe & Rebuild: The ONLY way to be sure the RAT is gone.
• Rotate Keys: Change every password, API key, and SSH token stored on that machine.

The safe versions are 1.14.0 and 0.30.3.

Stay safe. Pin your dependencies. 🔒

#Axios #CyberSecurity #SupplyChainAttack #Javascript #WebDev #InfoSec