CVE-2026-34841: Download of Code Without Integrity Check

Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan RAT. Users of @usebruno/cli who ran...

Malicious code in mocha-less-loader-axios-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bba08a828bd8ae434fdbe2f07303a911d202385632eb1fa95adf5361f03147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124833

Malicious code in mocha-less-loader-axios-npm npm...

EUVD-2021-0488

Malware in sbrugna...

Malicious code in axios-npm-cosmiconfig-io (npm)

The package axios-npm-cosmiconfig-io was found to contain malicious code...

MAL-2025-43553 Malicious code in axios-npm-cosmiconfig-io (npm)

The package axios-npm-cosmiconfig-io was found to contain malicious code...

PT-2020-6068 · Npm · Axios

Name of the Vulnerable Software and Affected Versions: Axios NPM package version 0.21.0 Description: The issue is related to insufficient validation of incoming requests in the Axios library, which can be exploited by a remote attacker to perform a Server-Side Request Forgery SSRF attack. This...