Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Howard University has rebuilt its hospital’s C-suite, six months after cleaning house of execs employed by its former ...

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...

Critical digital infrastructure is increasingly maintained by under‑resourced individuals, yet exploits have economic and ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Across the country, conversations about school safety often focus on policies, surveillance technology and emergency ...

Apple has now made it possible for more iPhones still running iOS 18 to receive security updates that protect against the ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.