Posts tagged with 'axios' - 1

Axios Compromised

Axios has been compromised. Versions 1.14.1 and 0.30.4 are malicious and inject a dependency on plain-crypto-js@4.2.1. Look for these versions and remove this dependency.

• Axios: https://security.snyk.io/vuln/SNYK-JS-AXIOS-15850650
• Plain-crypto-js: https://security.snyk.io/vuln/SNYK-JS-PLAINCRYPTOJS-15850652

Snyk Blog Post: https://snyk.io/pt-BR/blog/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform/