On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler.
CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across ...
UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
Learn how builders at the Agentic Commerce on Arc AI hackathon are turning autonomous AI finance into production-ready ...
Trying to test API online can be a bit of a headache, especially with so many tools out there. I’ve found myself lost in the options more than once. Whether you’re just starting out or you’ve been ...
“The repo named in the notice was part of a fork network connected to our own public Claude Code repo, so the takedown ...
The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...