🧰 plain-crypto-js

The items that name it 3

• What is a dependency firewall?
  article2026-07-13

  malicious transitive dependency pulled into axios installs

• VSCode Lifecycle Script Malware
  writeup2026-05-16
• Supply Chain Compromise of axios npm Package
  writeup2026-03-31It is written here as plain-crypto-js (npm package).

  Never previously existed; injected as dependency, postinstall script drops RAT