DevSecOps

Practical advice on integrating security into the software development process and test automation.

2 articles

All categories

Web Application Security Cloud Security Compliance and Regulations DevSecOps Threat Intelligence Zero Trust

Malware in the axios package on npm - how to secure your applications?

3/31/2026

•

8 min

Malware in the axios package on npm - how to secure your applications?

The main axios maintainer's account (100+ million downloads/week) was compromised - versions 1.14.1 and 0.30.4 installed a RAT trojan on macOS, Windows, and Linux. Full analysis with IOCs, remediation steps, and Aikido Safe Chain protection.

The Evolution of the Threat: Why Shai-Hulud 2.0 Forces Us to Redefine Software Supply Chain Security

11/26/2025

•

10 min

The Evolution of the Threat: Why Shai-Hulud 2.0 Forces Us to Redefine Software Supply Chain Security

An analysis of the Shai-Hulud 2.0 attack on the npm ecosystem — 796 compromised packages, a dead man's switch, and how OX Security protects the software supply chain.