Secure What Matters: Scaling Effortless Container Security for the AI Era

Snyk reports a malicious supply-chain compromise of the popular Axios npm package: attacker-controlled maintainer account published malicious versions 1.14.1 and 0.30.4 that add a hidden dependency deploying a cross-platform remote-access trojan (RAT). The incident can impact any projects that pull those package versions or transitive dependencies; Snyk provides guidance to detect exposure, remove or pin to safe versions, audit dependency and CI secrets, and investigate potential compromise. No CVE identifiers were listed in the blog post.