The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.

An emerging threat cluster is exploiting vulnerable Web-exposed Next.js apps and using an automated tool to steal credentials ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...