LinkedIn says it scans extensions to prevent invasive web scraping and calls the California lawsuits 'a house of cards built ...

North Korean hackers used an updated version of a known backdoor to target a popular npm package.

The UAT-10608 hacking group is using automated scanning and scripts to exploit React2Shell in a large-scale credential ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

Axios is published and maintained on npm, the default package registry for JavaScript and Node.js projects. It is used to ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

Experts have pinned the attack on “one of npm’s most depended-on packages” on hackers backed by the Democratic People’s ...