Axios 1.14.1 compromised with malware, targets AI-assisted development workflows
Supply chain attack targets axios package
A supply chain attack has compromised axios version 1.14.1, which silently pulls in [email protected] as a dependency. This package is an obfuscated RAT (Remote Access Trojan) dropper. NPM has pulled the malicious version, but developers who installed it during the window of vulnerability may be infected.
AI-assisted development workflows at risk
The attack specifically targets developers using AI coding assistants like Claude. The source notes that with AI coding, developers often let the AI handle package installation without checking package.json diffs or auditing what dependencies are being pulled in. Attackers are exploiting this trust in automated workflows where developers scaffold projects and run installs without manual verification.
Immediate detection and remediation steps
Run these commands to check for infection:
# Check your lockfile
grep -r "plain-crypto-js" package-lock.json
grep -r "[email protected]" package-lock.json
Check for persistence artifacts
ls -la /library/caches/com.apple.act.mond # macOS
ls /tmp/ld* # Linux
If you find the malicious package:
- Roll back to [email protected] immediately
- Rotate all keys and credentials (AWS credentials, API keys, etc.)
- Audit all lockfiles in your projects
Preventive measures
The source recommends pinning versions and manually auditing what dependencies AI assistants are pulling in. Developers should slow down on automated installs and actually read what packages are being added to their projects.
📖 Read the full source: r/ClaudeAI
👀 See Also
Ward: Open-source tool intercepts npm installs to block supply chain attacks for Claude Code users
Ward is an open-source tool that hooks into package managers to check every package before install scripts run. When Claude Code executes npm install, Ward automatically screens packages for malware, typosquats, suspicious scripts, and version anomalies.
Tool Authority Injection in LLM Agents: When Tool Output Overrides System Intent
A researcher demonstrates 'Tool Authority Injection' in a local LLM agent lab, showing how trusted tool output can be elevated to policy-level authority, silently changing agent behavior while sandbox and file access remain secure.
Claude Cowork 'Allow All Browser Actions' Permission Security Concerns and Proposed Fixes
A Reddit user highlights that Claude Cowork's 'Allow all' button grants permanent, unrestricted browser access across all future sessions with no visibility, boundaries, or expiration, creating security risks. The post proposes session-scoped or skill-scoped permissions as safer defaults.
Claude Cage: Docker Sandbox for Claude Code Security
A developer created a Docker container called Claude Cage that isolates Claude Code to a single workspace folder, preventing access to SSH keys, AWS credentials, and personal files. The setup includes security rules and takes about 2 minutes with Docker installed.