The new DeepLoad malware has been distributed in ClickFix attacks to steal user credentials and install a rogue browser ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...
The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
Gadget Review on MSN
Hackers turn "I'm not a robot" tests into malware trap scams – here's how
Hackers weaponize CAPTCHA tests to install malware that steals browser passwords and cryptocurrency wallets through fake ...
Explore Homebrew Statistics to uncover key usage trends, installs, and growth insights that help developers make smarter ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results