Axios

Simon Willison

tweet · 2026-03-31

Warned against

“If you have NPM package axios in your dependencies you need to make sure it's pinned to a known safe version, sounds like there's another supply chain attack in play”