Threats affecting pkg:npm/@usebruno/cli

Bruno, an open source IDE for API testing, was affected by a supply chain attack prior to version 3.2.1. The attack involved compromised versions of the axios npm package, which introduced a hidden dependency deploying a cross-platform Remote Access Trojan (RAT). Users of @usebruno/cli who ran npm install between 00:21 UTC and approximately 03:30 UTC on March 31, 2026, may have been impacted. The vulnerability is addressed by upgrading to version 3.2.1.