Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
Four vulnerabilities in CrewAI could be chained together via prompt injection for sandbox escape, remote code execution, and ...
Russian CTRL toolkit spread via malicious LNK files in February 2026, routing C2 through FRP-tunneled RDP to evade detection.
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler.
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
If you're short on cash, you can still get a VPN to improve your online privacy. Here's everything you get (and don't get) with the top free VPNs we've tested. I’ve been writing about technology since ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results