Russian Companies Avoid Breach Thanks to AppSec.Track Service

AppSec Solutions, a Russian cybersecurity company, has prevented a large-scale attack on dozens of organizations across the energy, fintech, and retail sectors.

In early April 2026, researchers disclosed that the widely used JavaScript library Axios, with around 100 million weekly downloads, had been compromised through a malicious open-source package. The attack could have introduced a remote access trojan (RAT), giving attackers control over infected systems. Malicious versions affected both Axios branches and targeted macOS, Windows, and Linux, disguising themselves as system processes.

However, the companies avoided a breach thanks to AppSec.Track (application security monitoring platform), which analyzes software supply chains and code components. The system blocked code pulled from Axios after the compromise, preventing dependencies published after March 30 from entering builds.

Thanks to early detection, several dozen AppSec Solutions clients avoided major disruption and retained control over their systems. The consequences could have been severe, with remediation potentially taking more than a week.