Top Node.js Maintainers Targeted in Sophisticated Social Engineering Scheme

itsecuritynews.info - 04/Apr 12:02

A highly coordinated social engineering campaign is actively targeting top open-source developers in the Node.js and npm ecosystem. Following the...

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

itsecuritynews.info - 03/Apr 12:36

The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering...

Axios npm hack used fake Teams error fix to hijack maintainer account

bleepingcomputer.com - 04/Apr 20:30

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social...

Axios npm hack used fake Teams error fix to hijack maintainer account

bleepingcomputer.com - 04/Apr 20:30

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social...

Axios Compromise on npm Introduces Hidden Malicious Package

itsecuritynews.info - 31/Mar 21:09

A newly discovered software supply chain attack targeting the npm ecosystem briefly compromised one of the most widely used JavaScript libraries in...

Axios Compromise on npm Introduces Hidden Malicious Package

itsecuritynews.info - 31/Mar 21:09

A newly discovered software supply chain attack targeting the npm ecosystem briefly compromised one of the most widely used JavaScript libraries in...

Hackers compromise Axios npm package to drop cross-platform malware

bleepingcomputer.com - 31/Mar 13:53

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to...

Hackers compromise Axios npm package to drop cross-platform malware

bleepingcomputer.com - 31/Mar 13:53

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to...

Google links Axios npm supply chain attack to North Korea-linked APT UNC1069

securityaffairs.co - 01/Apr 13:47

Google links the Axios npm supply chain attack to North Korean threat group UNC1069, targeting financial gain. Google has attributed the recent Axios...

Axios NPM Packages Compromised to Inject Malicious Codes in an Active Supply Chain Attack

itsecuritynews.info - 31/Mar 04:09

A sophisticated supply chain attack has targeted Axios, one of the most heavily adopted HTTP clients within the JavaScript ecosystem, by introducing a...

Rubriques :

Top Node.js Maintainers Targeted in Sophisticated Social Engineering Scheme

Articles similaires

Top Node.js Maintainers Targeted in Sophisticated Social Engineering Scheme

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

Axios npm hack used fake Teams error fix to hijack maintainer account

Axios npm hack used fake Teams error fix to hijack maintainer account

Axios Compromise on npm Introduces Hidden Malicious Package

Axios Compromise on npm Introduces Hidden Malicious Package

Hackers compromise Axios npm package to drop cross-platform malware

Hackers compromise Axios npm package to drop cross-platform malware

Google links Axios npm supply chain attack to North Korea-linked APT UNC1069

Axios NPM Packages Compromised to Inject Malicious Codes in an Active Supply Chain Attack

Les derniers communiqués