---
title: "Discussion on \"Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT\" | Hashnode"
description: "Discussion on \"Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT\". On March 31, 2026, two malicious versions of axios, the enormously popular JavaScript HTTP client with over 100 million weekly downloads, were briefly published to npm via a compromised maintainer account. The packages contained a hidden dependency t..."
url: "https://hashnode.com/posts/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform/69cc7c50d9ecf38c66e6115d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT](https://snyksec.hashnode.dev/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform?utm_source=hashnode&utm_medium=feed)

On March 31, 2026, two malicious versions of axios, the enormously popular JavaScript HTTP client with over 100 million weekly downloads, were briefly published to npm via a compromised maintainer account. The packages contained a hidden dependency t...

Apr 1 · 9 min read · snyksec.hashnode.dev  
Read the article

## Written by

[Snyk](https://hashnode.com/@Snyk)

@Snyk

  
[View profile](https://hashnode.com/@Snyk)

Automatically find and fix vulnerabilities in your code, open source, and containers. Sign up for free at https://snyk.co/hashnode

## Responses

Markdown supported · ⌘↵ to post

No responses yet.