Warning: The core npm package Axios version 1.14.1 has been targeted by an active supply chain attack.

2026-03-31 06:05:18

Mars Finance news: According to market sources, Socket detected an active supply chain attack involving the 1.14.1 version of the npm core package axios. The attacker injected a malicious dependency package to implant malicious code into axios. Developers using axios are advised to immediately pin the version and review the project lock file.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes