Microsoft warns of a malware campaign that delivers malicious software via WhatsApp messages and compromises systems.

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

A new malware-as-a-service called CrystalRAT is being promoted on Telegram, offering remote access, data theft, keylogging, ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...

PEDEVCO Corp. ( PED) Q4 2025 Earnings Call April 1, 2026 11:00 AM EDT Good morning, and welcome to PEDEVCo's Fourth Quarter and Full Year 2025 Earnings Conference Call. [Operator Instructions] Today's ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...

Security firm Socket advised developers to check dependencies for affected Axios versions and remove or roll back compromised ...

Google published a paper on March 31 that states that Bitcoin's cryptography could be impacted by quantum computing sooner ...

North Korean hackers published backdoored versions of the Axios NPM package using a compromised long-lived access token.

A new ClickFix attack that leverages a Nuitka loader targets macOS users with the Python-based Infiniti Stealer malware.