RetroFed Forums
Your home away from modern life.
Search Categories Forum list Register Log in
About RetroFed
RetroFed

Welcome to the nostalgia-filled piefed instance of yesteryear.

Open Registration with Application questionnaire.

If you have a question or comment you can post in !meta@retrofed.com or message @DosDude@retrofed.com or @Die4Ever@retrofed.com

In case of downtime and/or emergency, we will post updates on @DosDude@mastodon.social

Some rules we try to uphold:

  • Be civil. Bigotry is not welcome. This includes (but is not limited to): transphobia, queerphobia, racism, ageism and ableism. We do not promote hate.
  • Communities need to be Retro or Retro-adjacent.
  • Please don't upload pornographic content. (use an external image host for that)
72 registered users
Administrators: DosDude, Die4Ever
Visit retrofed.com
axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity
Post Reply RetroFed Forums Forum Index » TechSploits
AuthorMessage
limerod reddthat.com limerod@reddthat.com
Joined: 2023-06-24
Quote

Link: https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan

Hijacked maintainer account used to publish poisoned axios releases including 1.14.1 and 0.30.4. The attacker injected a hidden dependency that drops a cross platform RAT. We are actively investigating and will update this post with a full technical analysis.
3   Original
limerod reddthat.com limerod@reddthat.com
Joined: 2023-06-24
#2 · Quote Reply

If you were compromised follow the recovery steps mentioned in the article to reduce the damage.

Here's the hacker news discussion: https://news.ycombinator.com/item?id=47582220
1
Post Reply
Back to top
Powered by RetroFed · PieBB frontend · All times are Europe/Amsterdam