Google Threat Intelligence Group warns of active supply chain attack on npm’s Axios library Malicious dependency ...
Google's Gary Illyes published a blog post explaining how Googlebot works as one client of a centralized crawling platform, ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
Threat group TeamPCP exploited credentials stolen in the Trivy breach to push malicious versions of LiteLLM to PyPI, exposing developers to credential theft, ...
And more useful than I thought.