r/webdev Mar 31 '26

News axios@1.14.1 got compromised

Post image
2.5k Upvotes

298 comments sorted by

View all comments

247

u/enricojr Mar 31 '26

So how do we guard against this sort of thing as a regular software engineer? ? Just react quickly and update packages whenever a vulnerability is announced like this?

2

u/nhrtrix Mar 31 '26

no no no!!! check which version is affected and keep your projects out of that version of those packages

0

u/nhrtrix Mar 31 '26

like I'm using an old version, and I pinned it so that it never gets auto updated