Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...
The cyberattack on a technical tool called Axios, which has tens of millions of weekly downloads by developers, could have ...
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
North Korea-linked hackers have launched a significant cyberattack on Axios, a popular JavaScript library, raising concerns ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s ...