"The C2 hosts a web-based graphical user interface (GUI) titled 'NEXUS Listener' that can be used to view stolen information ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...
The North Korean threat actor behind the Axios supply chain attack has been targeting high-profile Node.js maintainers.
The design flaw in Flowise’s Custom MCP node has allowed attackers to execute arbitrary JavaScript through unvalidated ...
An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...