Axios npm Poisoning: Hackers Hijack Your Dev Secrets via 100M Downloads One npm install, and boom—your cloud keys are en route to a hacker's server. Axios, the unsung hero of JS networking, just got turned into a trojan horse. 4 min read 1 month ago