Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Six-time All-Star J.D. Martinez joins Mets as a special assistant to baseball operations

ST. LOUIS (AP) — Six-time All-Star J.D. Martinez is joining the New York Mets as a special assistant to baseball operations. The 38-year-old Martinez last played in 2024 for the Mets, the final season ...

Rollins scores 24, Kuzma adds 20 and the Bucks beat Mavericks 123-99 to snap 4-game skid

Ryan Rollins had 24 points, seven rebounds and nine assists, Kyle Kuzma added 20 points, and the Milwaukee Bucks beat the Dallas Mavericks 123-99 to snap a four-game losing streak.
The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...