Another day, another supply chain attack, this time Axios: https://github.com/axios/axios/issues/10604
Makes me glad I'm lazy and intentional about dependency updates. But it's a worrying trend. Soon we'll be tracking these things by the hour.
Jeff Geerling
npub1zs…s4f77
2026-03-31 04:44:59 UTC
Author Public Key
npub1zszjc7ge3vxvse7tn2f2wqzu8p9xmdpftfceqt8c63tzapmtgjhq3s4f77Seen on
wss://relay.momostr.pinkPublished at
2026-03-31 04:44:59 UTCEvent JSON
{
"id": "f7d4ab4b5efd377243c4605afb4d49aecc962d2110fc9004b32cbf41fa608728",
"pubkey": "14052c79198b0cc867cb9a92a7005c384a6db4295a71902cf8d4562e876b44ae",
"created_at": 1774932299,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/@geerlingguy/116321963195730224",
"web"
],
[
"proxy",
"https://mastodon.social/users/geerlingguy/statuses/116321963195730224",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/geerlingguy/statuses/116321963195730224",
"pink.momostr"
],
[
"-"
]
],
"content": "Another day, another supply chain attack, this time Axios: https://github.com/axios/axios/issues/10604\n\nMakes me glad I'm lazy and intentional about dependency updates. But it's a worrying trend. Soon we'll be tracking these things by the hour.",
"sig": "834d56b2528f8d6d887ebe00dea2df0379e6b2012b68c93e2cb3d41164588b5d80d181c634e85310db5cd5e8603bb5f10e61792e799642a6569af0c3fbdea6d4"
}