Discover the details of the North Korean hack on Axios software. We explain how the UNC1069 group is stealing US ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply ...

Another supply chain security threat emerged this week with the compromise of Axios. It is a popular JavaScript HTTP library, but for three hours, it ...

Artificial intelligence company Nota — whose clients include organizations like The Boston Globe and the Institute for Nonprofit News — is scrapping its network of local news sites after learning that ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

The internet runs on shared code—a big problem when a cyberattack corrupts the software supply chain.

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

'This is unironically a malware nuclear missile.' ...

Mid-Continent Public Library workers announced they are seeking to form a union after a majority signed a petition across the ...