More supply chain attacks, this time Axios

In Programming
security javascript

Things getting wild right now. Axios probably one of the most widely used JS libraries.

The lesson from these recent supply chain attacks is you should ALWAYS pin your ALL dependencies to EXACT versions. Under no circumstance should your app pull in a newer version of a dependency unless you manually update the version in you package.json or pyproject.toml

Wes Bos tweet about Axios being compromised

Recent Articles