Share
## https://sploitus.com/exploit?id=8833C917-95CE-52BF-A961-A24A6A93BED1
# ๐Ÿ” Vulnerability Research

A curated collection of in-depth vulnerability writeups covering real-world security incidents in the software ecosystem. Each entry includes a full technical analysis, proof-of-concept, IOC listing, and remediation guidance.

> **Purpose:** Educational reference and portfolio. All PoC code is for detection and research only.

---

## Index

| # | Vulnerability | Type | Severity | Date | Status |
|---|---------------|------|----------|------|--------|
| 001 | [Axios npm Supply Chain Attack (CVE-2026-26555)](./../../../axios-supply-chain-cve-2026-26555/) | Supply Chain / RAT | ๐Ÿ”ด Critical | Mar 31, 2026 | โœ… Complete |

---

## Structure

Each entry follows a consistent format:

```
/axios-supply-chain-cve-2026-26555/
โ”œโ”€โ”€ poc/               # Detection & PoC scripts
โ”œโ”€โ”€ README.md          # Project overview
โ”œโ”€โ”€ analysis.md        # Full writeup
โ””โ”€โ”€ references.md      # Cited sources
```

## Methodology

The writeup covers:
- **Root cause** โ€” what actually broke and how 
- **Attack timeline** โ€” pre-staging, execution, discovery, remediation
- **Technical deep-dive** โ€” deobfuscated payloads, attack chain, IOCs
- **PoC** โ€” reproduction or detection scripts
- **Lessons learned** โ€” systemic issues and mitigations

---

*Maintained by [@horrister](https://github.com/horrister)*