A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
Engineers from OLX reported that a single-line modification to dependency requirements allows developers to exclude unnecessary GPU libraries, shrinking contain ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
Free cryptographically verified code quality scoring for software procurement. The best software wins. Not the best ...
An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...
Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...