CVE-2026-34841: Download of Code Without Integrity Check

Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack involving compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan RAT. Users of @usebruno/cli who ran...

EUVD-2021-0488

Malware in sbrugna...

PT-2020-6068

Name of the Vulnerable Software and Affected Versions Axios NPM package version 0.21.0 Description The issue is related to insufficient validation of incoming requests in the Axios library, which can be exploited by a remote attacker to perform a Server-Side Request Forgery SSRF attack. This allo...