Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
New attack waves from the ‘PhantomRaven’ supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers. The campaign ...
LinkedIn reportedly injects a JavaScript fingerprinting script to probe visitors' browsers for 6,236 installed Chrome ...