Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
Morning Overview on MSN
North Korea-linked hackers used fake Teams updates to hit Axios npm
Hackers linked to North Korea compromised the widely used Axios npm package by tricking a maintainer into installing malware ...
The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...
NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by bitcoin wallets. A major NPM developer, qix, has had their account compromised.
Concerned users can set up their own backup system if they don’t trust the steps NPM Inc. has taken to prevent problems The NPM registry of JavaScript packages has become a critical cog in the ...
Microsoft is acquiring Node package manager npm Inc., officials announced on March 16. (Neither company is sharing the purchase price.) Microsoft plans to integrate GitHub with npm with the intent of ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results