What makes this attack so unsettling is that all the hackers had to do was just steal the password of one of the axios maintainers.
A compromise of the widely used Axios software package has triggered fresh concern over open-source security after attackers used a hijacked maintainer account to publish poisoned versions carrying ...
Experts have pinned the attack on “one of npm’s most depended-on packages” on hackers backed by the Democratic People’s ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
A supply chain compromise involving the widely used JavaScript package Axios is now being tied to a North Korea-linked threat ...
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
North Korean hackers compromised the widely used Axios JavaScript library to infiltrate US companies and steal cryptocurrency ...
Google Threat Intelligence Group warns of active supply chain attack on npm’s Axios library Malicious dependency ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Spread the loveIn a worrying development for the cybersecurity landscape, North Korean hackers have successfully infiltrated the widely-used Axios NPM package, introducing backdoored versions of the ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results