Google Threat Intelligence Group warns of active supply chain attack on npm’s Axios library Malicious dependency ...

Google's Gary Illyes published a blog post explaining how Googlebot works as one client of a centralized crawling platform, ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

And more useful than I thought.