Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...

The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

'This is unironically a malware nuclear missile.' ...

Elon Musk’s space exploration company has filed preliminary paperwork to sell shares to the public, according to two sources ...

Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s ...

Twists, turns, and puppies!

Some grilled dishes get talked about before the grill is even ready. These picks keep things simple while still feeling like ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...