Hack history / 2026 / Hack or exploit
axios npm package
Hack or exploit on Mar 31, 2026 · Supply Chain Attack
ONE SOURCE · 1 SOURCE
Lost
undisclosed
dollars at the time
Returned
none listed
as the sources state it
Rank
not ranked
collapses, frauds and later news are not ranked
What happened
Socket has detected an active supply chain attack targeting version 1.14.1 of the core npm package, axios. The attacker injected malicious code into axios by introducing a malicious dependency that first appeared today. Developers using axios are advised to pin their versions immediately and review their project lockfiles.
Details
- Date
- Mar 31, 2026
- Kind
- Hack or exploit
- Method
- Supply Chain Attack
- How in
- Keys, accounts and infrastructure
- Target
- not stated
- Chains
- not stated
Reported by
Related incidents
Ledger (Supply Chain) 2026 · Hack or exploit · $93M
Polymarket International 2026 · Hack or exploit · $2.7M
Bloom Trading Bot 2026 · Hack or exploit · $953K
Holdstation 2026 · Hack or exploit · $462K
Long Bridge 2026 · Hack or exploit · $118K
Polymarket International 2026 · Hack or exploit · $2.7M
Bloom Trading Bot 2026 · Hack or exploit · $953K
Holdstation 2026 · Hack or exploit · $462K
Long Bridge 2026 · Hack or exploit · $118K
Cite this page
SwanBluechip, "axios npm package hack, Mar 31, 2026: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htb821925013/ (data as of 2026-11-01).