npm
-
techShai-Hulud Malware Exploits Software Supply Chains, Hits OpenAI and Microsoft
A sophisticated malware campaign, Shai-Hulud, spreads through npm and PyPI, compromising major tech firms including OpenAI and Microsoft.
-
techNorth Korean Hackers Compromise Axios Open Source Library
North Korean state-sponsored hackers targeted the Axios HTTP library maintainer, compromising a widely-used open source package and exposing thousands of organizations to credential theft.
-
techAnthropic Leaks Claude Code Source in NPM Packaging Error
Anthropic accidentally exposed over 500,000 lines of Claude Code CLI source code due to a packaging mistake.
-
techAxios JavaScript Library Compromised in Sophisticated Supply Chain Attack
Hackers infiltrated the Axios npm package, deploying remote access trojans across Windows, macOS, and Linux systems. Developers must act immediately to mitigate widespread compromise.
-
techMalicious Axios NPM Releases Compromise Developer Systems
Security firms warn developers after malicious code found in popular JavaScript library Axios.
-
techInvisible Code Threatens GitHub and Software Repositories
Hackers exploit hidden Unicode characters to conceal malicious payloads in software supply chains, bypassing AI and human review.