Critical digital infrastructure is increasingly maintained by under‑resourced individuals, yet exploits have economic and ...
Two malicious Axios npm releases have prompted warnings for developers to rotate credentials and treat affected systems as ...
A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...
Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer account was taken over. Security r ...
A widely used JavaScript package used with over a hundred million weekly downloads has been compromised in a new supply chain ...
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
21d
ThreatDown Uncovers First Cyber Attack Abusing Deno JavaScript Runtime for Fileless Malware Delivery
ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...
Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...
Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results