DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...

The financially motivated cybercriminal threat actor Storm-1175 operates high-velocity ransomware campaigns that weaponize ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

The massive amount of junk code that hides the malware's logic from security scans was almost certainly generated by AI, ...

Cybercriminals are increasingly prioritizing speed and scalability over technical sophistication. Rather than crafting highly ...

Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...