Researchers scan 10 million websites and uncover thousands of exposed API keys quietly granting access to cloud systems and ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...

Experts pin attack on “one of npm's most depended-on packages” on hackers backed by the Democratic People’s Republic of Korea ...