Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...

Russian state-backed hackers have stepped up their game with new malware families that hide behind fake CAPTCHA tests. The group, known as Star Blizzard or ColdRiver, now uses ClickFix attacks to ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...