The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Our '7 Days' weekly tech roundup brings the juiciest announcements. Read about humans flying near the moon, Netflix refunding ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
What makes this attack so unsettling is that all the hackers had to do was just steal the password of one of the axios ...
The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...
North Korean hackers used an updated version of a known backdoor to target a popular npm package.
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
Security researchers have discovered a specific type of alert that they can decipher from a Google advisory. The language is ...
A new White House app promises direct access to the administration, but its data collection and app behavior raise some ...