DAT Solutions Internal
Apr 1, 2026 2:03 PM PDT
Axios malicious package
Updates
-
Apr 1, 2026 2:03 PM PDT
DAT Artifactory shows Compromised axios 1.14.1 package was downloaded
https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan Resolution: The investigation concluded there was no evidence of payload execution or C2 across environments, despite observed downloads. Containment actions were completed and a Post-Incident Review is plannedResolved