A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

The risk in the JavaScript ecosystem isn't theoretical: earlier this month, a number of packages used by millions of developers were compromised via malicious code. These malware attacks against ...

NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by bitcoin wallets. A major NPM developer, qix, has had their account compromised.

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

Libscore, a service that can tell you which JavaScript libraries the top million websites use, is launching publicly today. Borne out of payments processing startup Stripe’s Open Source Retreat, ...