The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...
Google patches 21 Chrome vulnerabilities, including an actively exploited zero-day flaw that could enable code execution and ...
Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...
Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.
Anthropic's Claude Code CLI had its full TypeScript source exposed after a source map file was accidentally included in ...
'This is unironically a malware nuclear missile.' ...
North Korean hackers used an updated version of a known backdoor to target a popular npm package.
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
�� CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest axios@1.14.1 now pulls ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results