Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...

The launch of Moltbook, a social network for AI agents, will go down as the most intriguing mass agentic AI experiment we’ve ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...

A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...

The full breadth of this incident is still unclear, but given the popularity of the compromised package, we expect it will ...

Threat actors have started exploiting CVE-2026-21643, a critical vulnerability in Fortinet FortiClient EMS leading to remote ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

Axios functions as pre-built software that a developer can easily incorporate into a JavaScript project. However, a hacker ...