Threat actors have been exploiting the vulnerability to achieve root access since 2023

Hackers Launch Social Engineering Offensive Against Key Node.js Maintainers
Following the high-profile supply chain compromise of the widely used Axios package, a highly coordinated social engineering campaign has been uncovered targeting top-tier Node.js and


.webp?w=0&resize=0,0&ssl=1)