GovInfoSecurity

Backdooring of JavaScript Library Axios Tied to North Korea

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Microsoft

WhatsApp malware campaign delivers VBScript and MSI backdoors

A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...
腾讯网

一条Claude Code 源代码的社会性死亡

出品｜虎嗅科技组作者｜余杨编辑｜苗正卿头图｜视觉中国 3月31日消息， Claude Code 源代码发生泄露。 这个 59.8 MB 的 JavaScript 源映射文件，原本应用于内部调试，却被无意中包含在今天早上早些时候推送到公共 npm ...