In this article Analysis of the attack Mitigation and protection guidance Microsoft Defender detections Indicators of compromise Hunting queries On March 31, 2026, two new npm packages for updated versions of Axios, a popular HTTP client for JavaScript that simplifies making HTTP requests to a REST endpoint with over 70 million weekly downloads, were identified as malicious. These versions…
Mitigating the Axios npm supply chain compromise
calendar_today
April 1, 2026
person
Microsoft Threat Intelligence and Microsoft Defender Security Research Team
domain
microsoft-defender-for-cloud