Developers can now use all ACP-compatible AI agents and receive basic features for JavaScript and TypeScript for free – ...

The OpenJS Foundation has launched a new program to support companies in switching to current Node.js versions.

Google links Axios npm supply chain attack to UNC1069 after trojanized versions 1.14.1 and 0.30.4 spread WAVESHAPER.V2, ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...

Google's Gary Illyes published a blog post explaining how Googlebot works as one client of a centralized crawling platform, ...

Axios, a widely used JavaScript HTTP client, was briefly distributed through npm in two malicious versions after a maintainer account was taken over. Security r ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

�� CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls ...

Overview On March 31, NSFOCUS CERT detected that the npm repository of the HTTP client library Axios was poisoned by the supply chain. The attacker bypassed the normal GitHub Actions CI/CD pipeline of ...