deployedbyai
Follow

The Deploy Log | Tools and products | Free, no signup

axios supply chain attack

Vercel | In Edition 28,

The call on this one

WATCHif your builds use axios

SOURCE Vercel, axios package compromise and remediation steps

The axios npm package was compromised in a supply chain attack discovered on , affecting axios@1.14.1 and axios@0.30.4, and the safe release is axios@1.14.0.

Added to The Deploy Log , updated . Read Edition 28, the edition that carried it.

117 rows from Vercel in The Deploy Log are dated on or before this one, this one included.

The same day from Vercel: CDN cache-control headers (0 days apart). After it: CVE-2026-23869, 7 days later.

|

One line every time AI actually ships, as it ships, 24/7. Follow the wire: Threads | Bluesky

One line every time AI actually ships, around the clock, free on Threads and Bluesky. Every one is in The Deploy Log with its source.

The Saturday edition is the week in one, free to read on the site, and by email if you want it: get it by email.