On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
I’ve used plenty, but this one rewired my daily workflow.
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
During a recent penetration test, we came across an AI-powered desktop application that acted as a bridge between Claude ...
ShellGPT makes the terminal user-friendly, saving time by generating commands, automating scripts, and guiding me through tasks.
Supply chain attacks feel like they're becoming more and more common.
North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...
Windows users have always had a taste for automation. From the earliest batch scripts and scheduled tasks to PowerShell pipelines and, more recently, Power Automate, the OS has long rewarded those ...
Audit identifies credential harvesting, C2 callbacks, and data exfiltration patterns across 18.7% of the most popular OpenClaw agent skills, ClawSecure reports ClawSecure’s audit found ClawHavoc ...