Open-source

Axios NPM Attack: How One Hijacked Account Poisoned Millions of JavaScript Projects

The axios npm attack used a hijacked maintainer account to inject malware via hidden dependencies. Here's how it worked and what developers must do now.