Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
An extremely popular NPM package used in many JavaScript projects has been compromised and can wreak havoc on your machine if ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...
Cryptopolitan on MSN
Axios supply chain attack raises risk to crypto wallets
Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...
The attackers swapped the account's email address for an anonymous ProtonMail inbox and pushed the infected packages manually ...
NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by bitcoin wallets. A major NPM developer, qix, has had their account compromised.
A hacker has gained access to a developer's npm account and injected malicious code into a popular JavaScript library, code that was designed to steal the npm credentials of users who utilize the ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results