The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...
FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...
North Korean hackers used an updated version of a known backdoor to target a popular npm package.
UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results