Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...
Claude extension flaw enabled silent prompt injection via XSS and weak allowlist, risking data theft and impersonation until ...