Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...
North Korean hackers used an updated version of a known backdoor to target a popular npm package.
AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
OpenAI pauses its Stargate UK data centre plans, citing energy costs and regulatory uncertainty, dealing a blow to the UK’s ...
Build your first fully functional, Java-based AI agent using familiar Spring conventions and built-in tools from Spring AI.
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
GL Communications Inc., a global provider of voice testing solutions, announces significant enhancements to its SIP testing ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were receiving unauthorized patch updates, all containing the same hidden ...