Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
The Hacker News

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
Hosted on MSN

1 move turned a winning chess game into checkmate

During a blitz round of the European Women’s Blitz Chess Championship, a player quickly gained a huge advantage against a strong Ukrainian Woman International Master and even won an extra piece early ...
Milwaukee Journal Sentinel

Magnet chess game sold on Amazon, Etsy recalled for serious injury risk

A magnet chess game is being recalled due to a risk of serious injury or death from magnetic ingestion, according to a recall notice from the Consumer Product Safety Commission. The Kluster Fun ...
IEEE

Undefined-oriented Programming: Detecting and Chaining Prototype Pollution Gadgets in Node.js Template Engines for Malicious Consequences

Abstract: Prototype pollution is a type of recently-discovered, impactful vulnerability that affects JavaScript code. One important yet challenging research problem of prototype pollution is how to ...