Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.

Two CISOs dissect the Axios npm attack, revealing a self-erasing RAT, CI/CD compromise risks and why open-source software ...

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...