Hosted on MSN

Trump blindsides Leavitt, tells her to 'wait and see' as he leaks sensitive information to the press

President Donald Trump’s unscripted media contacts have left his communications office struggling to maintain message discipline during U.S. military action in Iran. According to aides cited by The ...
Reuters

US security agency is using Anthropic's Mythos despite blacklist, Axios reports

April 19 (Reuters) - The United States National Security Agency is using Anthropic's Mythos Preview AI tool despite ‌the Pentagon hitting the company with a formal supply-chain risk designation, Axios ...
cybernews

Axios patches critical vulnerability that allows attackers to steal cloud credentials

Just two weeks after a massive supply chain compromise, Axios, a widely used JavaScript library for making web requests, is experiencing another critical threat. It contains a bug that allows ...
SecurityWeek

OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack

OpenAI revealed on Friday that it’s one of many organizations affected by the recent Axios supply chain attack, which cybersecurity experts have attributed to North Korean hackers. Axios is a widely ...
Bleeping Computer

Axios npm hack used fake Teams error fix to hijack maintainer account

The maintainers of the popular Axios HTTP client have published a detailed post-mortem describing how one of its developers was targeted by a social engineering campaign linked to North Korean hackers ...
PC Magazine

Axios Hack Traced to AI Deepfake Trap

This week’s hack of Axios, a widely used software package, has been traced to an elaborate AI deepfake from suspected North Korean hackers that was convincing enough to trick a developer into ...
VentureBeat

Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...
cybermagazine

GTIG: How Did North Korean Hackers Compromise Axios?

North Korea-Nexus Threat Actor Compromised popular NPM package Axios with over 100 million weekly downloads A financially motivated North Korean hacking group compromised an NPM package Axios, with ...
Wall Street Journal

The Axios Hack: What to Know

A breach Tuesday of the widely used Axios software library is the latest in a string of incidents exposing risks in the systems that underpin how modern software is built. Developers use Axios to ...
Infosecurity-magazine.com

Hackers Hijack Axios npm Package to Spread RATs

Threat actors have targeted an open source maintainer to hijack one of the most popular npm packages and spread remote access Trojans (RATs). Axios is a JavaScript library downloaded over 100 million ...
Microsoft

Mitigating the Axios npm supply chain compromise

On March 31, 2026, two new npm packages for updated versions of Axios, a popular HTTP client for JavaScript that simplifies making HTTP requests to a REST endpoint with over 70 million weekly ...