Embedded malicious code (backdoor) in axios - #VU124720

Detailed vulnerability description

The vulnerability allows a remote attacker to gain unauthorized access to the application.

The vulnerability exists due to presence of embedded malicious functionality in the application code (aka backdoor) that allows a remote attacker to gain unauthorized access to the application. Attacker compromised axios repository and introduced a new dependency plain-crypto-js.

Remediation

Sources

• https://www.endorlabs.com/learn/npm-axios-compromise
• https://www.aikido.dev/blog/axios-npm-compromised-maintainer-hijacked-rat
• https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan