A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...
Explore Homebrew Statistics to uncover key usage trends, installs, and growth insights that help developers make smarter ...