The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...
Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
The UAT-10608 hacking group is using automated scanning and scripts to exploit React2Shell in a large-scale credential harvesting campaign.
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Iranian media claimed Friday that a US pilot or pilots had ejected over southwestern Iran, and urged Iranians in the area to ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
In 2026, entry-level and transition roles often expect more than passive course completion. Employers want to see that you can write queries that answer business questions, work with browser logic, ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...