
馃洝锔廦our node_modules Is an Attack Surface: A Practical npm Security Checklist for 2026
On March 31, 2026, someone hijacked the npm account of axios's lead maintainer. Axios is an HTTP client with over 100 million weekly downloads. The attacker skipped the project's CI pipeline and publi


