A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...

Anthropic has accidentally exposed Claude Code's full 512,000-line TypeScript source via an npm source map, revealing ...

Just-released Version 1.113 of Microsoft’s Visual Studio Code editor emphasizes improvements ranging from chat customizations ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North Korean threat actors.

Claude Code, Anthropic’s top AI agent, just suffered a major source code leak. Version 2.1.88 exposed 512,000 lines of ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

朝鲜这个国家，在大多数人的认知里应该是相当封闭落后的。但他们的网络攻击能力，一直被严重低估。从 2014 年的索尼影业攻击，到 2017 年的 WannaCry 勒索病毒，再到这次对 npm 生态的精准打击，朝鲜黑客的技术水平和作战纪律一点也不「落后 ...