Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar ...
Analysis Shows Production-Deployable Rego Policies Would Have Prevented CMS Data Exposure, 500K-Line Source Code Leak, ...
Google patches 21 Chrome vulnerabilities, including an actively exploited zero-day flaw that could enable code execution and ...
Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found ...
Suspected North Korean hackers have compromised Axios, one of the most widely used JavaScript libraries in American software ...
Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
'This is unironically a malware nuclear missile.' ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
The full breadth of this incident is still unclear, but given the popularity of the compromised package, we expect it will ...