TGViewer
Programming Programming @programmingreddit · 903 subscribers
Post #13069 153
axios 1.14.1 and 0.30.4 on npm are compromised - dependency injection via stolen maintainer account
https://safedep.io/axios-npm-supply-chain-compromise/

https://redd.it/1s8ct9i
@programmingreddit
SafeDep - Real-time Open Source Software Supply Chain Security axios Compromised: npm Supply Chain Attack via Dependency Injection axios 1.14.1 was published to npm via a compromised maintainer account, injecting a trojanized dependency that executes a multi-platform reverse shell on…
Open in Telegram All posts from @programmingreddit
More from @programmingreddit
  1. Sep 29, 2026Fast Primality Testing for 32-bit integers via Forisek and Jancina https://leetarxiv.subst…
  2. Sep 29, 2026nine npm packages shipping worm that spread by itself over SSH https://safedep.io/dirtybla…
  3. Sep 28, 2026Packing Binary Is Fun, Actually https://hereticpleb.vercel.app/blog/packing-binary-is-fun-…
  4. Sep 27, 2026Don't couple your Go code to GitHub https://iain.rocks/blog/dont-couple-your-go-code-to-gi…
  5. Sep 27, 2026Postgres AT TIME ZONE 'UTC' does NOT do what you think it does https://bookofrevenue.com/b…
  6. Sep 26, 2026Optimizing a Lock-Free Ring Buffer https://david.alvarezrosa.com/posts/optimizing-a-lock-f…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →