---
id: 6875
title: "Axios NPM Distribution Compromised in Supply Chain Attack"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/axios-npm-compromised-in-supply-chain-attack"
published_at: "2026-03-31T08:26:35Z"
tags: ["cloud", "supply-chain"]
phying_url: "https://phying.com/item/6875"
lang: en
---

# Axios NPM Distribution Compromised in Supply Chain Attack

## Summary

A hacked axios maintainer published malicious npm versions 1.14.1/0.30.4 carrying plain-crypto-js, a dropper planting platform RATs. Pulled within hours, yet axios runs in ~80% of cloud environments.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-03-31T08:26:35Z
- **Original:** https://www.wiz.io/blog/axios-npm-compromised-in-supply-chain-attack
- **Phying News:** https://phying.com/item/6875