STOP. DO NOT DEPLOY. "We don't even use Axios" Think again. As one of npm's most depended-on packages, Axios is almost certainly lurking in your nested dependencies. v1.14.1 is actively distributing malware (plain-crypto-js). Pin versions or wait until this is resolved ↓
Axios v1.14.1 distributes malware: urgent security alert
By
–
