#Axios
All CosmicBytez Labs articles tagged #Axios, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-44488: Axios Fetch Adapter Ignores Configured Request and Response Size Limits
Axios versions 1.7.0 through 1.15.x fail to enforce maxContentLength and maxBodyLength when using the fetch adapter, allowing unbounded request and...
- News
Why the Axios Attack Proves AI Is Mandatory for Supply
The North Korean supply chain attack on Axios — a JavaScript library with 100 million weekly downloads — highlights why human-scale monitoring can no...
- News
The Good, the Bad and the Ugly in Cybersecurity – Week 14
SentinelOne intercepts a LiteLLM supply chain attack in real time, attackers weaponize the Axios npm package to deploy a cross-platform RAT, and a Chrome...
- News
Axios NPM Package Breached in North Korean Supply Chain
A long-lived NPM access token was used to bypass the GitHub Actions OIDC-based CI/CD publishing workflow and push backdoored versions of the widely used...
- News
Google Attributes Axios npm Supply Chain Attack to North
Google's Threat Intelligence Group has formally attributed the supply chain compromise of the popular Axios npm package to UNC1069, a financially...
- News
Attack on Axios Developer Tool Threatens Widespread
Security researchers at multiple firms are sounding alarms over a supply chain attack against Axios, an npm package with 100 million weekly downloads....
- News
Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
Two newly published versions of the widely used Axios HTTP client library — v1.14.1 and v0.30.4 — were found to contain a malicious fake dependency that...
- Newsletter
Mar 31 Digest: Axios npm RAT, Claude Code Source Leaked
The Axios npm library was weaponized to deliver a cross-platform RAT; Anthropic accidentally leaked Claude Code's CLI source in an npm package; Google...