The Cybersecurity and Infrastructure Security Agency (CISA) has released an alert to provide guidance in response to the ...
Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...
Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.
Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results