CVE-2026-40175: How Axios Turns Prototype Pollution Into Full Cloud Compromise
A deep dive into the critical Axios gadget chain that escalates prototype pollution to RCE and AWS IMDSv2 bypass. CVSS 9.9.
Blog
Tag: #axios
The Axios npm Supply Chain Compromise: A North Korean APT's Bold Move
On March 31, 2026, the North Korean state actor Sapphire Sleet compromised Axios npm packages, injecting malware that deployed RATs on developer machines worldwide. Here's what happened and how to stay safe.