The Axios Hack: How a single compromised account put millions of developers at risk

What makes this attack so unsettling is that all the hackers had to do was just steal the password of one of the axios maintainers.
Microsoft

Mitigating the Axios npm supply chain compromise

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Security Boulevard

Axios supply chain attack chops away at npm trust

Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...

Claude Code's source code appears to have leaked: here's what we know

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
XDA Developers on MSN

Google kept featuring this Chrome extension for months after it turned malicious

How can an extension change hands with no oversight?
SpaceNews

Another Earth raises $4 million to boost AI training with synthetic satellite data

Another Earth CEO and co-founder Maya Pindeus (right) says the startup’s synthetic satellite data addresses a key bottleneck in Earth observation AI. Credit: Another Earth TAMPA, Fla. — A Vienna-based ...
CBS News

What to do if you get a data breach notice from Conduent or another company

If it feels like data breach letters are arriving more often than junk mail, you're not imagining it. A new report from the Identity Theft Resource Center says data breaches hit a record high last ...
Fast Company

Switching to Anthropic? Claude can now take your memories from ChatGPT, Gemini, and Copilot

Anthropic just released a “memory” tool that allows Claude users to copy their chats from other AI chatbots, giving those who want to switch over to Claude from ChatGPT, Gemini, and Copilot an easy ...
CNN

Tracking the firings, resignations and other impacts from the Epstein files

The US government’s release of its Epstein files has set off tremors among the world’s elite. A former prince was stripped of his title and arrested. Ambassadors have been sacked and also arrested.