The Hacker News

Google Attributes Axios npm Supply Chain Attack to North Korean Group UNC1069

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...

Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Claude Code's source code appears to have leaked: here's what we know

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
Techlomedia

GitLab Releases Urgent Security Updates to Fix High-Severity Vulnerabilities

GitLab has rolled out critical security updates to address multiple high-severity vulnerabilities affecting both Community ...

AI Is Deciding What Your Customers See. Most Brands Haven’t Caught Up

AI is redefining retail. Deloitte projects 25% of sales will be agent-driven by 2030. Learn how SEO, AEO, and GEO are ...
Microsoft

Mitigating the Axios npm supply chain compromise

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Security Boulevard

Axios Front-End Library npm Supply Chain Poisoning Alert

Overview On March 31, NSFOCUS CERT detected that the npm repository of the HTTP client library Axios was poisoned by the supply chain. The attacker bypassed the normal GitHub Actions CI/CD pipeline of ...
Hackaday

This Week In Security: The Supply Chain Has Problems

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...
Hackaday

This Week In Security: Flatpak Fixes, Android Malware, And SCADA Was IOT Before IOT Was Cool

Rowhammer attacks have been around since 2014, and mitigations are in place in most modern systems, but the team at gddr6.fail has found ways to apply the attack to current-generation GPUs.

福島原発事故時に政権にいた人物の「調書」を通じ、当初の政治 ...

東京電力福島第一原発の事故に首相補佐官として対処し、吉田昌郎（まさお）所長との連絡役を務めた細野豪志氏が朝日新聞のインタビューに応じた。細野氏は事故から３年が経過し「記憶の限界に来ている。そろそろ話さなければいけない」と考えていた矢先に「吉田調書」報道が出て、証言を決心したという。

北朝鮮のハッカー「UNC1069」がオープンソースのAxiosに対する ...

JavaScriptライブラリ「Axios」がサプライチェーン攻撃を受けてリモートアクセス型トロイの木馬を仕込まれた件で、Googleのセキュリティ研究者が調査報告書を提出しました。Googleは、早くとも2018年から活動している北朝鮮関連の脅威ア ...

先週は何が危険だった？企業・家庭に影響する脆弱性まとめ

人気ライブラリの供給網攻撃、スマホ決済を狙うフィッシング、家庭用ルータの脆弱性――先週はソフトウェアから個人利用サービス、ネットワーク機器まで幅広い領域でセキュリティリスクが顕在化した。中でもaxiosを狙った攻撃は開発環境そのものを侵害する可能性が ...