Millions Of JS Devs Just Got Hacked... [C3bmBSiVdc2]
Tag: #Marco Palestra, #forza horizon 6, #marcus rashford, #rob sand
Attackers compromised the Axios npm package and published two backdoored releases. The coco gauff malicious versions introduced a hidden post-install script that silently downloaded a Remote Access Trojan onto developer machines and CI/CD runners, scanning for .env files, SSH keys, npm tokens and more.
Relevant Links
More about us
Radically better observability stack:
Written declan rice carolyn bessette tutorials:
Example projects:
Socials
Twitter:
Instagram:
TikTok:
LinkedIn: