One of the most widely used JavaScript libraries in the world was turned into a weapon on March 30, 2026, when attackers poisoned the Axios npm...

A highly coordinated social engineering campaign is actively targeting top open-source developers in the Node.js and npm ecosystem. Following the...

A highly coordinated social engineering campaign is actively targeting top open-source developers in the Node.js and npm ecosystem. Following the...

Hackers gained access to an API for the CPUID project and changed the download links on the official website to serve malicious executables for the...

Hackers gained access to an API for the CPUID project and changed the download links on the official website to serve malicious executables for the...

The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates...

A fresh wave of cyberattacks is targeting Windows users through a deceptive social engineering technique called ClickFix. Attackers use a fake browser...

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social...