A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Wasm, PGlite, OPFS, and other new tech bring robust data storage to the browser, Electrobun brings Bun to desktop apps, ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
The UAT-10608 hacking group is using automated scanning and scripts to exploit React2Shell in a large-scale credential harvesting campaign.
Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
A stone-and-brick reservoir, believed to be over 1500 years old, has been unearthed on Elephanta Island, showing how ancient ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer ...