Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan

Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by sersi on Tuesday March 31, 2026 @05:38AM (#47584842)

But wouldn't the type of people that notifes anomalous network activity be exactly the type of people who add a 7 day delay because they're security conscious?

[ Parent | on HN ]

Re:Axios Compromised on NPM – Malicious Versions Drop Remote... by DrewADesign on Tuesday March 31, 2026 @09:57AM (#47587495)

And I’ll bet a chunk of already-compromised vibe coders are feeling really on-top-of-shit because they just put that in their config, locking in that compromised version for a week.

[ Parent | on HN ]