Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
A simple prompt sent Claude Code on a mission that uncovered major security vulnerabilities in popular text editors — and ...
The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...