Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Valentić told The Hacker News that the use of fake progress indicators mimicking legitimate installation progress and the ...
Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a month before Cisco patched the hole, ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
The source code of Anthropic's CLI tool Claude Code was accidentally made publicly accessible via a source map in the npm ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results