Fireship on MSN

The silent threat: Axios library exposes developers

A recently discovered Remote Access Trojan in the widely used Axios library puts millions of JavaScript developers at risk.
Tech Times

npm Supply Chain Attack: North Korea Backdoored 144 AI Packages in 88 Minutes

Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...
Homeland Security Today

Supply Chain Compromise Impacts Axios Node Package Manager , CISA Alert Warns

The Cybersecurity and Infrastructure Security Agency (CISA) has released an alert to provide guidance in response to the software supply chain compromise of the Axios node package manager (npm). 1 ...
cybernews

Axios patches critical vulnerability that allows attackers to steal cloud credentials

Just two weeks after a massive supply chain compromise, Axios, a widely used JavaScript library for making web requests, is experiencing another critical threat. It contains a bug that allows ...
Forbes

OpenAI Confirms Security Incident—Mac Users Must Update All Apps Now

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. OpenAI confirms security incident means macOS users must update all apps now. ChatGPT ...
Gulf News

Techie Tonic: Two CISOs warn Axios breach changes supply chain trust model

In the wake of a critical supply chain attack targeting the widely used Axios JavaScript library, like leading analyst from NST Cyber pointed out, Many CXOs community chief information security ...
Windows Report

Hackers Breached Axios npm by Impersonating Companies and Hijacking Maintainer Access

A recent attack on the widely used JavaScript library Axios has exposed developers to a serious supply chain breach. The incident involved malicious packages that stayed live for hours and silently ...
SlashGear

Alleged North Korean Hack Of US Companies Could Take 'Months' To Recover From

Hackers from North Korea have bugged software used by thousands of companies across the United States in an attempt to use stolen cryptocurrency to fund the country's nuclear and missile programs. So ...
Developer Tech

Axios npm attack causes JavaScript supply chain chaos

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million weekly downloads. The North Korean state actor Sapphire Sleet compromised the ...
The Hindu

The Axios Hack: How a single compromised account put millions of developers at risk

If you’ve ever built a website, run a startup, or shipped software of any kind in the last decade, there’s a good chance you’ve used axios. It’s one of those software tools that powers enormous chunks ...
VentureBeat

Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...