Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
Experts have pinned the attack on “one of npm’s most depended-on packages” on hackers backed by the Democratic People’s ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
Intel's Binary Optimization Tool (BOT) is designed to enhance chip performance in certain games and apps, but Geekbench ...
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
Anthropic's Claude Code source has leaked via a packaging error, exposing anti-distillation traps, an undercover mode, and ...
Another big drawback: Any modules not written in pure Python can’t run in Wasm unless a Wasm-specific version of that module ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
A hacker took over an account belonging to the lead maintainer of the JavaScript library, Axios, which is used to handle HTTP requests, as reported by Cybernews. Security researchers found that ...
Claude Code, Anthropics top AI agent, just suffered a major source code leak. Version 2.1.88 exposed 512,000 lines of ...