Socket:

A supply chain attack compromises HTTP client Axios, which has 100M weekly npm downloads, introducing a malicious dependency and deploying a multi-stage payload  —  Socket Research Team … Our analysis shows the malicious package deploys a multi-stage payload, including a remote access trojan …

Socket:

A supply chain attack compromises HTTP client Axios, which has 100M weekly npm downloads, introducing a malicious dependency and deploying a multi-stage payload  —  Socket Research Team … Our analysis shows the malicious package deploys a multi-stage payload, including a remote access trojan …

Source: TechMeme
Source Link: http://www.techmeme.com/260331/p4#a260331p4