The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

Google patches 21 Chrome vulnerabilities, including an actively exploited zero-day flaw that could enable code execution and ...

Suspected North Korean hackers have compromised Axios, one of the most widely used JavaScript libraries in American software development, by hijacking a maintainer’s npm account and publishing tainted ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

What makes this attack so unsettling is that all the hackers had to do was just steal the password of one of the axios ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

'This is unironically a malware nuclear missile.' ...

Spread the loveIn a worrying development for the cybersecurity landscape, North Korean hackers have successfully infiltrated the widely-used Axios NPM package, introducing backdoored versions of the ...

In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

Hackers linked to North Korea are suspected of an ambitious attack on an inconspicuous but widely used software package, ...