Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
thehackernews.comAxios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying cross-platform RAT malware.
» north korean hacker group UNC1069 using social engineering to get access: axios npm for nodejs: software minimalism please and another javascript security problem (this time social engineered supply chain attack)
Why keep all your results to yourself? - Blog with howtos and public free software and hardware OpenSource searchable knowledgebase about Linux and OpenSource - with a touch security, politics and philosophy.
We May Be Living Through the Most Consequential Hundred Days in Cyber History, and Almost Nobody Has Noticed
An archive of this year’s insane timeline of hacks few people are talking about