Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

A data breach at the city attorney's office led to a massive cache of LAPD files being dumped online. Here's what we know ...

PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

More than 800 U.S. TikTok users shared their data with The Washington Post. We used it to find out why some people become power users, spending hours per day scrolling. Each circle in the chart ...

Democratic Representative Dan Goldman revealed an unredacted document from the Epstein files on the House floor Wednesday, saying that it directly contradicts Donald Trump’s account of his ...

An unwell Chinese woman working away from home has received a care package from her concerned parents which contained a whole cow. On March 7, a woman posted a video of herself receiving the heavy ...