oss-sec mailing list archives From : Michael Straßberger <m.strassberger () metaways de> Date : Tue, 31 Mar 2026 09:29:05 +0200 Hello OSS-Security, since I haven't seen yet a post about this: There was a Supply Chain attack targeting the npm package- axios. Axios is a widely spread and used Javascript library. Some more discussions are happening in a github Issue [0] From HackerNews[1]: Users who have Axios versions 1.14.1 or 0.30.4 installed are required to rotate their secrets and creden
