theNetworkChuck/axios-attack-guide

The Axios npm Supply Chain Attack Guide is a comprehensive resource designed to help developers and organizations detect and protect against a critical security breach involving the widely-used Axios package. On March 31, 2026, a sophisticated supply chain attack compromised Axios, leading to the injection of a malicious dependency that could deploy a remote access trojan (RAT) within seconds. This repository provides detection scripts, indicators of compromise (IOCs), and a robust protection guide to help users ascertain whether they have been affected by this attack and to secure their systems against such vulnerabilities in the future.

Use cases for this project include developers and IT security professionals who need to evaluate their current installations of Axios for potential compromises, as well as those looking to implement preventive measures against similar supply chain attacks. The guide outlines step-by-step detection procedures, including system scans for malicious dependencies and monitoring for unauthorized activity, alongside recommended best practices for maintaining secure package management. By following the guidance provided in this repository, users can enhance their security posture and reduce the risk of exploitation from compromised npm packages.