Skip to content

[email protected] and [email protected] are compromised #10604

@ashishkurmi

Description

@ashishkurmi

more details: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan

Most likely, a maintainer's GitHub and npm accounts are compromised as these issues are getting deleted.

I have also reported this as a vulnerability, so that a CVE can be generated.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions