Curl Axios Npm, Promise based HTTP client for the browser and node.

Curl Axios Npm, This module is an axios third-party module to log any axios request as a curl command in the console. The internal project name macWebT links Promise based HTTP client for the browser and node. js - axios/axios Mar 31, 2026 · A North Korea-nexus threat actor targeted the popular axios NPM package in a massive supply chain attack. js library that provides an Axios-like interface while using curl under the hood. This triggered a cross-platform RAT during installation and replaced its files with clean decoys, making detection challenging. 1 and v0. 1, an obfuscated dropper that deploys platform-specific RATs (Windows PowerShell, macOS Mach-O C++, Linux Python). Mar 31, 2026 · The most immediate danger, however, is a concurrent, separate supply-chain attack on the axios npm package, which occurred hours before the leak. Apr 1, 2026 · On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates to download from command and control (C2) that Microsoft Threat Intelligence has attributed to the North Korean state actor Sapphire Sleet. 1. 14. 30. Mar 31, 2026 · On March 30-31, 2026, the npm package axios (~83M weekly downloads) was compromised through a maintainer account hijack. Perfect for scenarios where you need the power of curl with the convenience of Axios's API. 2 days ago · The Hostwinds hosting, the clean-then-armed typosquat, the setup postinstall dropper (TLS off, detached spawn, self-delete), and the crypto-wallet-stealing payload all match the Axios npm compromise that Microsoft attributed to Sapphire Sleet (BlueNoroff) earlier in 2026. Axios As Curl A Node. Post Note: Description This module is an axios third-party module to log any axios request as a curl command in the console. This blog provides an overview of the latest supply chain and security tool incidents with Darktrace telemetry and defensive actions to improve organizations defensive cyber posture. How it works The module makes use of axios' interceptors to log the request as a cURL Check Axios-to-curl 1. May 12, 2026 · Over 400 compromised npm package versions and at least 2 PyPI packages published in a coordinated supply chain attack targeting TanStack, Mistral AI, UiPath, OpenSearch, guardrails-ai, and dozens of other packages. Utility for converting cURL commands to code curl from Google Chrome Open the Network tab in the DevTools Right click (or Ctrl-click) a request Click "Copy" → "Copy as cURL" "Copy as cURL (bash)" Paste it in the curl command box above Safari Firefox A Node. Mar 31, 2026 · axios v1. Description This module is an axios third-party module to log any axios request as a curl command in the console. Full remediation included. May 5, 2026 · The Axios compromise and the cascading Trivy campaign illustrate how quickly this abuse can move once attacker activity enters build and delivery workflows. 3. The macOS RAT is classified as NukeSped (Lazarus-exclusive). 4 contain a hidden RAT via plain-crypto-js. 5 package - Last release 1. What happened with axios A concurrent, separate supply-chain attack on the axios npm package occurred hours before the leak. Real-time cryptocurrency market data aggregator with DeFi analytics, portfolio tracking, watchlists, and comprehensive market insights. Learn the full attack chain, IOCs, and how to check if you are affected. Two malicious versions injected plain-crypto-js@4. Apr 1, 2026 · The Concurrent Security Crisis: The Axios Supply Chain Attack The source code leak happened alongside a separate and more immediately dangerous security event. 5 with MIT licence at our NPM packages aggregator and search engine. Although the malicious versions are no longer available for download, since Axios is one of the most widely Mar 31, 2026 · A supply chain attack hit Axios when attackers used stolen npm credentials to publish malicious versions containing a phantom dependency. 2. It was originally posted as a suggestion on the axios repository, but since we believed it wasn't in the scope of axios to release such feature, we decided to make it as an independent module. . evye, xuf, 9rh, 6f, fzsmkqf, nu5gq, wi, 0b, v4m6, 82xb,