A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
The open-source database RxDB 17 now synchronizes data directly via Google Drive or OneDrive – developers no longer need ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer account was taken over. Security r ...
A supply chain compromise involving the widely used JavaScript package Axios is now being tied to a North Korea-linked threat ...
If you're avoiding iOS 26, you still need protection. Apple is releasing a rare backported iOS 18 update to defend against ...
The full breadth of this incident is still unclear, but given the popularity of the compromised package, we expect it will ...
A new White House app promises direct access to the administration, but its data collection and app behavior raise some ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
'This is unironically a malware nuclear missile.' ...
Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...
Axios functions as pre-built software that a developer can easily incorporate into a JavaScript project. However, a hacker ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results