An unknown malware slinger targeting open source software developers via Slack impersonated a real Linux Foundation official ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

Please note that this lesson was published in April 2025 and we are no longer reviewing emails and messages from schools for ...

Spend your time this weekend making your homelab easier to access.

In early April 2025, security researchers confirmed that North Korean state-sponsored hackers had successfully compromised the Axios HTTP library. It is one ...

AI chatbots make it possible for people who can’t code to build apps, sites and tools. But it’s decidedly problematic.

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

Axios is published and maintained on npm, the default package registry for JavaScript and Node.js projects. It is used to ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...