With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...
The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through malicious npm releases. Security researchers from StepSecurity identified ...
DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.
Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.
A .NET-based infostealer sold as part of a commercial cybercrime toolkit that bundles a stealer, crypter and remote access ...
Attackers exploit OpenClaw hype with fake “CLAW” airdrops, luring developers from GitHub into wallet-draining phishing sites.
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
Fake CAPTCHA pages can install the StealC infostealer. Don't paste or run commands; disconnect and change passwords.
The malware at the center of it, dubbed Omnistealer by investigators, uses public blockchains not just for payments, but as ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results