Hackers Poison Axios npm Package with 100 Million Weekly Downloads
2026-03-31T20:51:46Z•55b469ba84d586e74b6216ad86df4e127a7b7f1ba8b65106de674e8d39d1e7ca
ai-agentsaxiosbig-ipcredential-theftcrypto-paymentscve-2025-53521dark-webdata-exfiltrationf5github-token-theftinteger-underflowkernel-observabilitymalicious-sdkmalwarenpmopenai-codexpython-sdkrcestrongswansupply-chaintelnyxunicode-injectionvpn
What happened
Multiple high-impact security incidents reported: the popular Axios npm package was poisoned in a supply-chain attack (affecting packages with ~100M weekly downloads), exposing developers to malware, data theft and possible system takeover; an F5 BIG-IP APM vulnerability (CVE-2025-53521) was escalated to a critical 9.8 RCE and is being exploited in the wild—immediate patching and IOCs recommended; an OpenAI Codex flaw allowed theft of GitHub tokens via malicious/hidden Unicode branch names; a 15-year-old strongSwan integer-underflow bug can crash VPNs (EAP-TTLS); Telnyx’s Python SDK releases (
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 55b469ba84d586e74b6216ad86df4e127a7b7f1ba8b65106de674e8d39d1e7ca
- Enrichment time
- 2026-03-31T20:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.