@bytebot
Mitsukeru LERG protects (on Windows and macOS) against this particular supply chain attack. But you're probably not running it yet... so... if you want to check if you're affected on Linux or macOS:
find ~ -name "package.json" -not -path "*/node_modules/*" -exec grep -l '"axios"' {} \; | while read f; do
echo "=== $f ==="
dirname "$f" | xargs -I {} bash -c 'cd {} && npm list axios --depth=0 2>/dev/null'
done
https://x.com/feross/status/2038807290422370479
0 reply
4 recasts
9 reactions