What makes this attack so unsettling is that all the hackers had to do was just steal the password of one of the axios maintainers.

If you're avoiding iOS 26, you still need protection. Apple is releasing a rare backported iOS 18 update to defend against ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

'This is unironically a malware nuclear missile.' ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Simply dropping AI into an operation will not deliver positive results without significant work behind the scenes.

DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.

The command line finally learned how to speak human, and it's about time ...