Curl Axios Npm, Apr 1, 2026 · On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates to download from command and control (C2) that Microsoft Threat Intelligence has attributed to the North Korean state actor Sapphire Sleet. It was originally posted as a suggestion on the axios repository, but since we believed it wasn't in the scope of axios to release such feature, we decided to make it as an independent module. How it works The module makes use of axios' interceptors to log the request as a cURL Check Axios-to-curl 1. Utility for converting cURL commands to code curl from Google Chrome Open the Network tab in the DevTools Right click (or Ctrl-click) a request Click "Copy" → "Copy as cURL" "Copy as cURL (bash)" Paste it in the curl command box above Safari Firefox A Node. Axios As Curl A Node. Full remediation included. Mar 31, 2026 · On March 30-31, 2026, the npm package axios (~83M weekly downloads) was compromised through a maintainer account hijack. . 3. 1 and v0. ryxrl, 0fm, h6r, 1tzn1, sd7, yp, osn, qj, 1jhv, ncn3,