A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

TeamPCP hackers compromised the Telnyx package on the Python Package Index today, uploading malicious versions that deliver ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

Files on a central cloud server used by the ransomware group highlight a systematic, aggressive attack on network backups as ...

Security teams are scrambling after two malicious releases of the Telnyx Python SDK were uploaded to PyPI on March 27, turning a widely used developer tool into a credential-stealing backdoor that ...

A newly documented BlankGrabber infection chain is using a bogus “certificate” loader to disguise a multi-stage Windows compromise, adding another layer of deception to a commodity stealer already ...

Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...