The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.

CVE-2025-59528 exploited in Flowise for over six months across 12,000+ exposed instances, enabling full system compromise.

Senior Node.JS Developer Cape.io • Full-time • Tilburg, North Brabant, Netherlands • 1h geleden Carrièreniveau: Ervaren (> 2 jaar) About Cape.io At Cape.io, we're not just keeping pace with the ...

A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

The OpenJS Foundation has launched a new program to support companies in switching to current Node.js versions.

Learn Look Locate launches a groundbreaking guide on lymph node surgery in breast cancer, offering clear, expert-led ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...