Axios Supply Chain Attack Update - zscaler.net, zscalerone.net, zscalertwo.net, zscloud.net, zscalerthree.net, private.zscaler.com, zdxcloud.net, zpatwo.net, app.zsdpc.net, app.eu.zsdpc.net, zpabeta.net, zsdkone.net, zscalerrisk.net, admin.zscaleranalytics.net, zslogin.net
Incident Lifecycle
Incident Timeline
Investigating
Zscaler has analyzed the supply chain compromises affecting the Axios npm packages. Analysis confirms no impact to Zscaler platforms, products, or internal systems.As a best practice, customers should review their environments for the following impacted versions:Axios npm package versions: 1.14.1 and 0.30.4Actions if you have an impacted version:Update/Revert: Revert or pin Axios to known safe versions (e.g., 1.14.0 or 0.30.3)Rotate Credentials: Update all API keys, cloud token...
Apr 3, 2026 at 5:10 PM UTC
Was your business affected by this Zscaler outage?
Set up instant alerts for Zscaler — be the first to know about outages via email, Slack, Teams, or Discord.