Plain Crypto Js Malware Postinstall

Axios npm Hijacked | RAT Malware in 83M Download Library

An attacker hijacked the npm account of axios maintainer jasonsaayman on March 30, 2026, and published two malicious versions that silently install a remote access trojan on developer machines.

Alfanasa · Apr 2, 2026