Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by bitcoin wallets. A major NPM developer, qix, has had their account compromised.
GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.
'This is unironically a malware nuclear missile.' ...
ThreatDown’s EDR team discovered a sophisticated, multi-stage attack chain during an active investigation; the first documented case of attackers abusing the Deno runtime as a malware execution ...