#JavaScript library used to make asynchronous HTTP requests from browsers and #Nodejs environments

#cyber #axios #javascript #SUCKS !!!!
STOP USING #JAVASCRIPT !!!!
https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.html

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying cross-platform RAT malware.

The Hacker News
possibly affected: #React
#Vuejs applications (including Vue CLI projects)
#äNuxtjs projects (server-rendered Vue apps and examples)
#Nextjs example apps and tutorials (React SSR/static apps often use Axios)
React Native apps (mobile apps fetching APIs)
#Electron desktop apps (desktop JS apps making HTTP calls)
possibly #SignalDesktop
#Gatsby starters and plugins (some starters use Axios for data fetching)
#SvelteKit example projects (can be configured to use Axios)
#Tauri apps (examples showing Axios with custom fetch adapter)
#Nodejs backend utilities and CLI tools (server-side HTTP requests with Axios)

How #Axios Is Used

axios is typically found as a direct or transitive dependency in:

Frontend frameworks: #React, #Vue, #Angular projects
Backend frameworks: #Express, #Nextjs, #NestJS applications
#AWS #SDKs: The AWS SDK for #JavaScript uses axios
#GitHub Actions: Popular actions like slack-github-action (used by 23,000+ public repositories) depend on axios
Build tools and CI/CD: Countless development pipelines
Enterprise applications: Any project making HTTP requests

@wordmark Or, you know, just stop using axios since JS had the fetch API for *years* now.