The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
Adobe Acrobat and Reader users are under attack from hackers using a zero-day vulnerability. Update within 72 hours, Adobe ...
Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer ...
Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
Google patches 21 Chrome vulnerabilities, including an actively exploited zero-day flaw that could enable code execution and ...
Two CISOs dissect the Axios npm attack, revealing a self-erasing RAT, CI/CD compromise risks and why open-source software ...
Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...
In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...
A supply chain compromise involving the widely used JavaScript package Axios is now being tied to a North Korea-linked threat actor, turning what already looked like a serious open-source incident ...