Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
�� CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls ...
Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
The DarkSword iOS exploit chain was used by the Russian APT behind the Coruna exploit in attacks targeting Ukraine.
The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a ...
DarkSword exploit targets iOS 18.4–18.7 using 6 flaws and 3 zero-days, enabling rapid data theft from iPhones across multiple ...
More than a few voters could find themselves unsatisfied with the Liberals and open to a hard-left turn in future elections ...
A chain of vulnerabilities is letting attackers steal sensitive info from iPhones.
The ransomware gang, known for double-extortion attacks, had access to a critical Cisco firewall vulnerability weeks before ...
Axios is published and maintained on npm, the default package registry for JavaScript and Node.js projects. It is used to ...
The US Cybersecurity and Infrastructure Security Agency (CISA) has told all federal civilian agencies to patch a critical ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results