A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...

The full breadth of this incident is still unclear, but given the popularity of the compromised package, we expect it will ...

According to Google researchers, a North Korean group tracked as UNC1069 has previously targeted cryptocurrency and ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s ...

Suspected North Korean hackers have bugged a software package that has been used by thousands of US companies in a major ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...

Suspected North Korean hackers are believed to be behind an ongoing compromise of the widely used open-source package Axios, ...

A hacker took over an account belonging to the lead maintainer of the JavaScript library, Axios, which is used to handle HTTP requests, as reported by Cybernews. Security researchers found that ...