广受欢迎的Axios HTTP客户端库近期遭到黑客攻击，通过被入侵账户传播恶意软件。攻击者利用npm包管理器上被劫持的账户分发恶意代码，影响两个软件包并安装远程访问木马，可控制Windows、macOS和Linux系统。该库每周下载量近3亿次，攻击者精心策划18小时并预建三个操作系统载荷。安全专家呼吁开发者立即检查并更新当前版本，这起供应链攻击代表了网络安全面临的严重威胁。

More open-source developers are finding that, when used properly, AI can actually help current and long-neglected programs.

Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Language package managers like pip, npm, and others pose a high risk during active supply chain attacks. However, OS updates ...

JFrog reports Telnyx PyPI package was poisoned with malware by TeamPCP Malicious update delivered hidden .wav payload that ...

Vibe coding is transforming how software is built by allowing users to create apps through simple prompts instead of ...

With 15,384 commercial martech tools in the 2025 landscape and AI-powered pitches arriving daily, the biggest risk for ...

Threat group TeamPCP exploited credentials stolen in the Trivy breach to push malicious versions of LiteLLM to PyPI, exposing ...

For many mid-sized enterprises, large corporations, and public institutions, the reality of business intelligence often falls ...

Artificial intelligence is rapidly transforming how organizations operate, analyze data, and develop new products. For ...