HTTP / fetch from node.js; skip Axios!

How to make an HTTP request in Node.js

...using the request package (now deprecated) to make HTTP requests in Node.js.
Then promises became mainstream and I switched to request-promise (also deprecated).
In more recent times I moved to axios and I thought I would never look back… and yet here we are.
The HTTP story in Node.js keeps evolving, and for good reasons!

Making HTTP requests is one of the most common tasks in Node.js development.
Whether you’re calling a REST API, fetching data from an external service, or building a web scraper, you need to know how to do it effectively.

Quick Answer: Use fetch()

npm just got HACKED (supply chain attacks explained) - YouTube
@ NetworkChuck


What happened, are you affected & how to prevent - axios supply chain attack - YouTube
@ Maximilian Schwarzmüller

axios Compromised on npm - Malicious Versions Drop Remote Access Trojan - StepSecurity

axios is the most popular JavaScript HTTP client library with over 100 million weekly downloads. On March 30, 2026, StepSecurity identified two malicious versions of the widely used axios HTTP client library published to npm: axios@1.14.1 and axios@0.30.4. The malicious versions inject a new dependency, plain-crypto-js@4.2.1, which is never imported anywhere in the axios source code

axios credential breach that basically enabled a back door into every nodejs environment regardless of architecture (i386, i686, a64, x86_64, or aarch64) with platform (Windows, Linux, or macOS) around the world. Post | LinkedIn

Update: Ongoing Investigation and Continued Remediation