Hackers compromise popular Axios Javascript library with hidden malware

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
AARP

Savannah Guthrie on Grief and Learning to Sit With Loss

Savannah Guthrie returned to the “Today” show anchor chair on Monday, April 6, 2026, for the first time since her mother, ...

Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines

Updated: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios ...
Security Boulevard

Frequently Asked Questions About the Axios npm Supply Chain Attack by North Korea-Nexus Threat Actor UNC1069

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
The Armenian Weekly

Breaking the cycle: Kima Harutyunyan on art, women and invisible labor

While scrolling through Facebook, I noticed a post titled “Forced Service.” It featured a mandala-shaped composition in which ...

Anthropic’s Claude Code Source Leaked

Anthropic has leaked the full source code for Claude Code via an npm update, revealing unreleased features like autonomous ...
The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
Decrypt

Anthropic Accidentally Leaked Claude Code's Source—The Internet Is Keeping It Forever

Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.
The Register-Herald

Former Southern Regional Jail corrections officer pleads guilty in excessive force conspiracy

A former corrections officer at Southern Regional Jail in Beaver, pleaded guilty Monday to his role in a conspiracy involving ...
Next City

The Weekly Wrap: City and State Governments Move Quickly To Erase César Chavez From Public Spaces

After stunning allegations of sexual abuse by the late labor rights icon César Chavez became public this month, city and ...
The Bakersfield Californian

ThreatDown Uncovers First Cyber Attack Abusing Deno JavaScript Runtime for Fileless Malware Delivery

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be the first documented case of attackers abusing the Deno JavaScript runtime ...