On March 30, 2026, compromised versions of Axios npm packages were released that would automatically install a Remote Access Trojan. The window of distribution was between Monday, March 30, 2026 at 7:59 PM EDT and Tuesday, March 31, 2026 at 12:26 AM EDT.
