Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

LiteLLM 1.82.7–1.82.8 supply chain attack exposed 33,185 secrets across 6,943 machines, leaving 3,760 valid credentials ...

Windows 11 KB5086672 is now rolling out as an optional update with several notable improvements after March 2026 update ...

I’ve tried to make Linux my daily OS, but I keep coming back to Windows. Here’s what still pulls me back, even when Linux ...

The financially motivated cybercriminal threat actor Storm-1175 operates high-velocity ransomware campaigns that weaponize ...

OpenClaw, an open-source AI agent with a red lobster logo, has sparked a nationwide craze in China in early 2026.Unlike ...

A recently released port of Doom can load into memory from Cloudflare without ever writing files to the disc. The project ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.