UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were receiving unauthorized patch updates, all containing the same hidden ...

Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

As the way software is built fundamentally changes, Cloudflare introduces the infrastructure to power millions of autonomous, ...

Cloudflare says dynamically loaded Workers are priced at $0.002 per unique Worker loaded per day, in addition to standard CPU and invocation charges ...

Last week, something alarming happened in the world of software — and almost nobody outside the tech industry noticed. A ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked maintainer account is behind the ...

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.