// Hacker Noon · 2 April 2026

Your AI Assistant Just Installed a Trojan: The Axios npm Compromise

Modern AI tools like Claude Code, Codex, or even the browser-based ChatGPT and Claude.ai often run npm install behind the scenes to make the things you ask for. If you asked an AI to "make me a weather app," it might have pulled in Axios as a transitive dependency. You never saw the command, and you...

Hacker Noon

@hacker-noon · Omotayo

hackernoon.com

Hacker Noon@hacker-noon