Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
There’s a new scam to look out for in a place you wouldn’t expect. Security experts at the Identity Theft Resource Center ...
LastPass users are receiving emails about a data breach settlement—but how do you know if the message is legitimate? I'll ...
Overview On March 31, NSFOCUS CERT detected that the npm repository of the HTTP client library Axios was poisoned by the supply chain. The attacker bypassed the normal GitHub Actions CI/CD pipeline of ...
Crown closures and metal packaging manufacturer Coleus Packaging showcased the R200-million investments it made in its Alrode ...
In the end, it came down to two divergent offensive players, doing what they do best as individuals, all for the betterment ...