Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads

Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads TrendMicro

Early report Major update Updated Mar 31, 2026, 9:53 PM UTC

Track this event Edit in app More event pages

What changed

New report from Auto search: attack 4d ago.

First seen Mar 31, 2026, 9:53 PM UTC Latest source Mar 31, 2026, 9:53 PM UTC

Update 1 4d ago

Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads

Auto search: attack •published Mar 31, 2026, 9:53 PM UTC •fetched Apr 1, 2026, 1:45 PM UTC

Event stats

Reports 1

Sources 1

Confidence low

Score 41

Entity focus

AxiosPackageCompromisedSupplyChain

Source spread

Auto search: attack

Turn this into an alert

Draft the watch from the event wording, then let PushMe handle follow-up changes.

Notify me about major new developments on Axios NPM Package Compromised: Supply Chain Attack Hits JavaScript HTTP Client with 100M+ Weekly Downloads, especially involving Axios, Package, Compromised.

Create alert from this event