The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
An emerging threat cluster is exploiting vulnerable Web-exposed Next.js apps and using an automated tool to steal credentials ...
A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results