Supply Chain Attack on Axios Pulls Malicious Dependency from...
socket.dev
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHu...