Axios, a popular JavaScript library, was compromised in a supply chain attack. Hackers hijacked its maintainer account, publishing two malicious versions that deployed a cross‑platform RAT, targeting developers worldwide and compromising projects that depend on it.
Comments