You Patched LiteLLM, But Do You Know Your AI Blast Radius?
2026-04-04T08:51:59Z•d24181cbcc39db6ac8bc6778af468ffd74c7c6ac60842576529bdaf4cfbbfbd8
RATaxioscompromised-maintainercross-platformdependency-injectionincident-responsemalicious-packagemalwarenpmpackage-securityremote-access-trojansoftware-supply-chainsupply-chain
What happened
Snyk reports a supply-chain compromise of the Axios npm package: malicious versions 1.14.1 and 0.30.4 were published via a compromised maintainer account that injected a hidden dependency which deploys a cross‑platform remote access trojan (RAT). Projects that include those versions (directly or transitively) may have been infected at install/runtime, risking system compromise and secret exposure. Recommended actions: identify affected projects by scanning package.json/lockfiles and dependency trees, remove or replace the malicious versions, restore from verified backups or known‑good versions
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- snyk_blog
- Record identifier
- d24181cbcc39db6ac8bc6778af468ffd74c7c6ac60842576529bdaf4cfbbfbd8
- Enrichment time
- 2026-04-04T08:51:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.