NPM Compromise via Axios Backdoor: Impact on AI Coding Agents
NPM Security Incident: Axios Package Compromise
A significant security breach occurred on March 31, 2026, when npm was temporarily compromised. A DPRK-linked threat actor stole credentials from an Axios maintainer and published two malicious package versions.
Attack Details
- Compromised versions: Axios 1.14.1 and 0.30.4
- Attack window: 3 hours
- Safe versions: 1.14.0 and 0.30.3
- Attack vector: The attacker published backdoored versions that injected a malicious dependency
- Malware behavior: The dependency ran a postinstall hook that downloaded a platform-specific RAT (remote access trojan)
- RAT capabilities: Established C2 beacons, harvested credentials, and self-erased after installation
Impact and Scope
Axios receives 400 million monthly downloads with 174,000 direct dependents, creating a massive blast radius. The attack was particularly devastating for AI coding agents including Claude Code, Cursor, and Copilot. These tools run npm install autonomously without human review, and the malware detached from the process before the command returned — making it completely invisible to output monitoring.
Thousands of developer machines were compromised within hours before the packages were removed from npm. If you installed any packages via npm during the attack window, you should consider the entire machine compromised.
Immediate Actions
- Check if you installed packages during the 3-hour window on March 31, 2026
- Verify you're using Axios versions 1.14.0 or 0.30.3 (not 1.14.1 or 0.30.4)
- Assume machines that installed compromised packages are fully compromised
- Review security monitoring for AI coding agent environments that automate npm installs
📖 Read the full source: r/openclaw
👀 See Also
Testing Uncensored Qwen 3.5 35B Models for Cybersecurity Questions
A cybersecurity professional tested three uncensored Qwen 3.5 35B models on hacking and security bypass questions, finding significant differences in response quality compared to the original censored model. The uncensored models consistently provided answers where the original model refused or gave incomplete responses.
Security vulnerabilities exposed in Lovable-showcased EdTech app
A security researcher found 16 vulnerabilities in a Lovable-showcased EdTech app, including critical auth logic flaws that exposed 18,697 user records without authentication. The app had 100K+ views on Lovable's showcase and real users from UC Berkeley, UC Davis, and schools worldwide.
Sunder: A Rust-Based Local Privacy Firewall for LLMs
Sunder is a Chrome extension that acts as a local privacy firewall for AI chats, built using Rust and WebAssembly, ensuring sensitive data never leaves your browser.
Axios 1.14.1 compromised with malware, targets AI-assisted development workflows
Axios version 1.14.1 has been compromised in a supply chain attack that silently pulls in [email protected], an obfuscated RAT dropper. Developers using AI coding assistants like Claude should immediately check their lockfiles and machines for infection.