Code Mala Tang
Apr 4, 2026 · Information Security
How AI‑Assisted Social Engineering Compromised the Popular Axios Module
A recent GitHub issue reveals that attackers used AI‑assisted social engineering—posing as a company founder, creating a fake Slack workspace, arranging Microsoft Teams meetings, and tricking the maintainer into installing a malicious npm package—to inject a trojan into the widely used Axios library, bypassing 2FA and publishing malicious code.
AIaxiosnpm security
0 likes · 3 min read