Crypto Potato 2026-03-31 04:30:07

Expert Warns of Critical, Ongoing Supply Chain Attack on Axios

According to Feross Aboukhadijeh, co-founder of security-oriented firm Socket Security, there is an active supply chain on Axios, which is one of npm’s most depended-on packages. NPM stands for Node Package Manager and is basically the world’s largest software registry, hosting more than two million packages of open-source JavaScript code. An argument can be made that it’s the backbone of modern Web3 development. According to Feross, the latest axios@1.14.1 is currently pulling in plain-crypto-just@4.2.1, which is a package that did not exist before today, suggesting that it’s a live compromise. This is textbook supply chain installer malware. Axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now. Socket AI analyiss confirms this is malware. Plain-crypto-js is an obfuscated dropper/loadre.” The malicious software can perform a range of actions, including deleting and renaming artifacts post-execution to destroy forensic evidence, staging and copying payload files to the OS temp and Windows ProgramData directories, executing decoded shell commands, and more. CRITICAL: Active supply chain attack on axios — one of npm’s most depended-on packages. The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios… — Feross (@feross) March 31, 2026 The expert recommends that developers who use axios immediately pin their versions and audit their lockfiles, while refraining from any updates for the time being. The post Expert Warns of Critical, Ongoing Supply Chain Attack on Axios appeared first on CryptoPotato .

En Okunan haberler

Why Is Rec Room, a $3.5B Roblox Competitor, S...
2026-03-31
Solana Bets Rise as Franklin’s SOEZ ETF Attra...
2026-03-31
Google research flags quantum attack risk as...
2026-03-31
Bitcoin analysts point to possible rally towa...
2026-03-31
XRP Setup Loading. Expert Says Last Time This...
2026-03-31
XRP Price Prediction as $12 Trillion Retireme...
2026-03-31
Bitmine Scoops $147M in Ethereum Crypto, Exte...
2026-03-31
US Opens $10T Retirement Market to Crypto: Ca...
2026-03-31

Feragatnameyi okuyun : Burada sunulan tüm içerikler web sitemiz, köprülü siteler, ilgili uygulamalar, forumlar, bloglar, sosyal medya hesapları ve diğer platformlar (“Site”), sadece üçüncü taraf kaynaklardan temin edilen genel bilgileriniz içindir. İçeriğimizle ilgili olarak, doğruluk ve güncellenmişlik dahil ancak bunlarla sınırlı olmamak üzere, hiçbir şekilde hiçbir garanti vermemekteyiz. Sağladığımız içeriğin hiçbir kısmı, herhangi bir amaç için özel bir güvene yönelik mali tavsiye, hukuki danışmanlık veya başka herhangi bir tavsiye formunu oluşturmaz. İçeriğimize herhangi bir kullanım veya güven, yalnızca kendi risk ve takdir yetkinizdedir. İçeriğinizi incelemeden önce kendi araştırmanızı yürütmeli, incelemeli, analiz etmeli ve doğrulamalısınız. Ticaret büyük kayıplara yol açabilecek yüksek riskli bir faaliyettir, bu nedenle herhangi bir karar vermeden önce mali danışmanınıza danışın. Sitemizde hiçbir içerik bir teklif veya teklif anlamına gelmez