The financially motivated cybercriminal threat actor Storm-1175 operates high-velocity ransomware campaigns that weaponize ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
North Korean hackers used an updated version of a known backdoor to target a popular npm package.
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
AtlasCross RAT spreads via 11 fake domains registered October 27, 2025, enabling encrypted C2 control and persistence.
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...
I’ve used plenty, but this one rewired my daily workflow.
An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...