North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
Hackers linked to North Korea are suspected of an ambitious attack on an inconspicuous software package, cybersecurity ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
A hacker took over an account belonging to the lead maintainer of the JavaScript library, Axios, which is used to handle HTTP requests, as reported by Cybernews. Security researchers found that ...
A hacker inserted malware in Axios, an open source web tool downloaded tens of millions of times weekly, in a widespread hack ...
Google's Gary Illyes published a blog post explaining how Googlebot works as one client of a centralized crawling platform, ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
Leaked "DarkSword" exploits published to GitHub allow hackers and cybercriminals to target iPhone users running old versions ...
The US Cybersecurity and Infrastructure Security Agency (CISA) has told all federal civilian agencies to patch a critical ...
Google Threat Intelligence Group (GTIG), Lookout Threat Labs, and iVerify published coordinated research in March 2026 on ...