A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
LangChain and LangGraph have patched three high-severity and critical bugs.
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Four vulnerabilities in CrewAI could be chained together via prompt injection for sandbox escape, remote code execution, and ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...
North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results