A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
Clinical trial data reviewed by NICE shows that semaglutide reduced the risk of serious cardiovascular events, including ...
Anthropic's Claude Code source has leaked via a packaging error, exposing anti-distillation traps, an undercover mode, and scaffolding for an unreleased agent.
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s ...
A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...