The Axios JavaScript NPM package was recently compromised, representing one of the highest impact supply chain attacks against the open source development ecosystem in recent months. Axios is the most ...

A Shai-Hulud copycat has turned up in yet another npm package just five days after TeamPCP open sourced the worm and ...

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...

A threat actor started using the Shai-Hulud worm in attacks only days after the malware’s source code was released.

Google Threat Intelligence Group warns of active supply chain attack on npm’s Axios library Malicious dependency “plain-crypto-js” deployed WAVESHAPER.V2 backdoor across Windows, macOS, and Linux ...

The malware authors behind the npm worm Shai-Hulud have released the source code. Now the first clones are appearing.

The Shai-Hulud malware leaked last week is now used in new attacks on the Node Package Manager (npm) index, as infected ...

But this is the new reality of modern cybersecurity. The gap between how fast attackers are moving and how fast defenders respond is widening. Developers got vibe coding. They stopped managing syntax ...

This week, more incidents that we can here list. Among them: cloned Shai-Hulud malware, a new maximum CVSS Cisco flaw. Edge ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...