PANews reported on March 31 that, according to Cointelegraph, Socket detected an active supply chain attack on version 1.14.1 of the npm core package axios. Attackers injected malicious code into axios by injecting a malicious dependency package that appeared for the first time today. Developers using axios are advised to immediately fix the version and review their project lock files.
Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact
crypto.news@mexc.com for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.