The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...

In 2025, Google fixed a total of eight zero-days exploited in the wild, many of which were discovered and reported by ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...