Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
A large-scale GlassWorm malware campaign targeting developer platforms appears to be significantly more extensive and ...
North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results