Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Security Boulevard

Frequently Asked Questions About the Axios npm Supply Chain Attack by North Korea-Nexus Threat Actor UNC1069

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
Microsoft

WhatsApp malware campaign delivers VBScript and MSI backdoors

A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...
The Hacker News

ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories

ThreatsDay Bulletin covers stealthy attack trends, evolving phishing tactics, supply chain risks, and how familiar tools are ...
PC Magazine

Samsung Galaxy S26 vs. Apple iPhone 17: Which Titan Takes the Crown?

Apple and Samsung’s flagship phones are closer than ever. We pit the Galaxy S26 lineup up against the iPhone 17 family to compare specs, features, displays, cameras, and more. I’m one of PCMag’s ...
CNBC

Capital One Venture X vs. American Express Platinum: Which luxury card has the best benefits?

Terms apply to American Express benefits and offers. Visit americanexpress.com to learn more. Anyone looking for a travel card with luxury perks will want to consider the Capital One Venture X Rewards ...