Axios Has A Dangerous Security Issue — Heres What Laravel Is Doing About It Taylor Frankie Paul [zyu0K1UqzUW]

Axios, one of the most widely used JavaScript clients with over 100 million daily downloads, has a serious security vulnerability. The attack is a sophisticated supply chain compromise the attacker never chyler leigh touched the Axios source code directly. Instead, a malicious dependency was injected that ran a post-install script to drop a remote access trojan (RAT) on developer machines.

In this video, we break down exactly how the attack worked and what the Laravel team is doing to protect the community including pinning Axios to safe versions, updating the Laravel installer to ignore scripts by default, and blocking the attacker's domain across Laravel Cloud.

If you installed or updated Axios in the last 24 hours, scan your machine immediately.

Full write-up with links:

Sponsored by:

* Mastering Laravel -

* PhpStorm -

* Laravel sostegno economico Cloud -

* Acquaintsoft -

* Depot -

* Mailtrap -

* Jump24 -

* Polyscope -

00:00 Breaking news: Axios security issue

00:30 How the supply chain attack worked

01:15 How sophisticated this attack really was

01:45 What the Laravel team is doing

02:30 How to check if you're affected

Business Inquiries:

----------------------------------------------------------------------

JOIN OUR WEEKLY LARAVEL susan boyle NEWSLETTER

----------------------------------------------------------------------