Axios package compromise and remediation steps

T1Covered by 1 source · first reported by Vercel (blog + changelog) at 31 Mar, 13:00 UTC

axios active supply chain attack Thenpm package was compromised in andiscovered on March 31, 2026. Vercel investigated this issue and implemented remediation actions to protect the platform. No Vercel systems were affected. axios@1.14.0 The npm registry removed the compromised package versions, and…

Sources

• T1Axios package compromise and remediation stepsVercel (blog + changelog)31 Mar, 13:00