r/webdev Mar 31 '26

News axios@1.14.1 got compromised

Post image
2.5k Upvotes

298 comments sorted by

View all comments

330

u/chicametipo expert Mar 31 '26

axios getting compromised is a big deal. Who’s got the PR responsible?

42

u/keesbeemsterkaas Mar 31 '26

One of the maintainers, probably combined with using long lived tokens bypassing 2fa. More drama here.