Hacker hijacks Axios open-source project, used by millions, to push malware:
A hacker inserted malware in Axios, an open-source web tool downloaded tens of ...
techcrunch.com/2026/03/31/hacker-hijacks-axios-open-source-project-used-by-millions-to-push-malware/
Story Details
| Last Updated | |
| Total Articles | 2 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
Similar to This
Previous
Hacker-on-Hacker Crime: ShinyHunters Is Trying to Extort CLOP Ransomware Group: Cybercriminal group ShinyHunters claims to have hijacked the website of a rival ...
pcmag.com/news/hacker-on-hacker-crime-shinyhunters-is-trying-to-extort-clop-ransomware
Hack at Marketing Vendor Exploited To Widely Spread ClickFix Malware Attack: A hack at Brevo, an online marketing vendor, created a pathway to place a ...
pcmag.com/news/hack-at-marketing-vendor-exploited-to-widely-spread-clickfix-malware-attack
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads: Hackers compromised HBO Max's official Reddit account and used it to push malicious ...
bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads/
Passkeys were pushed as a safer future. Hackers have figured out ways to break those synced to Google
digitaltrends.com/computing/passkeys-were-pushed-as-a-safer-future-hackers-have-figured-out-ways-to-break-those-synced-to-google/
Key FactsResearchers uncover attacks on Google-synced passkeys
Aug 4, 2026 · Reading time: ~30 sec.
Summary created with AI assistance · Source: digitaltrends.com
Summary created with AI assistance · Source: digitaltrends.com
- The three Pass-ta-key techniques target Google Password Manager in Chrome on Windows PCs with a Trusted Platform Module.
- The first attack can request a valid passkey response without administrator privileges, biometrics, a PIN, or victim interaction.
- GitHub rejected this attack, while eBay initially accepted it and closed the gap after researchers reported it.
- According to Unit 42, malware can extract the master key temporarily present in Chrome’s memory and decrypt existing and future passkeys.
Free Archive Program 7-Zip Can Be Hacked With a Malicious File: 7-Zip plugged the vulnerability last month, but the program doesn't have an auto-update feature ...
uk.pcmag.com/security/166240/free-archive-program-7-zip-can-be-hacked-with-a-malicious-file
Axios npm hack used fake Teams error fix to hijack maintainer account: The maintainers of the popular Axios HTTP client have published a detailed post-mortem ...
bleepingcomputer.com/news/security/axios-npm-hack-used-fake-teams-error-fix-to-hijack-maintainer-account/
Hackers Are Using Claude Code Leak As Bait to Spread Malware: With Anthropic rushing to wipe out the Claude Code leak, hackers are posting malware-laden files on ...
pcmag.com/news/hackers-are-using-claude-code-leak-as-bait-to-spread-malware
Axios Hack Traced to AI Deepfake Trap: On Thursday, lead developer Jason Saayman, published a post-mortem of the breach, which resulted in Axios briefly ...
pcmag.com/news/axios-hack-traced-to-ai-deepfake-trap
Hackers compromise Axios npm package to drop cross-platform malware: Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ ...
bleepingcomputer.com/news/security/hackers-compromise-axios-npm-package-to-drop-cross-platform-malware/
Hacker Tries to Spread Malware to Millions by Hitting 'Axios NPM' Software: Axios functions as pre-built software that a developer can easily incorporate into a ...
uk.pcmag.com/security/164160/hacker-tries-to-spread-malware-to-millions-by-hitting-axios-npm-software
North Korea-linked hack hits largely invisible software that powers online services
asiaone.com/digital/north-korea-linked-hack-hits-largely-invisible-software-powers-online-services
Computerworld Jan 16
One click is all it takes: How ‘Reprompt’ turned Microsoft Copilot into a data exfiltration tool
computerworld.com/article/4117750/one-click-is-all-it-takes-how-reprompt-turned-microsoft-copilot-into-a-data-exfiltration-tool.html
Hacker Pwns Programmer, Infects Widely Used Software With Malware: The malware was found in 18 npm packages that together are usually downloaded over 2 billion ...
uk.pcmag.com/security/159966/hacker-pwns-programmer-infects-widely-used-software-with-malware
15.8 million PayPal passwords allegedly leaked: How to check if you're affected
focus.de/wissen/technik/geleakte-paypal-passwoerter-so-pruefen-sie-ob-sie-betroffen-sind_2c5f648b-cdf2-4346-9734-d5f31bd6fd34.html
158-year-old company forced to close after ransomware attack precipitated by a single guessed password — 700 jobs lost after hackers demand unpayable sum
tomshardware.com/tech-industry/cyber-security/158-year-old-company-forced-to-close-after-ransomware-attack-precipitated-by-a-single-guessed-password-700-jobs-lost-after-hackers-demand-unpayable-sum
The Times and The Sunday Times Jan 23 25
Paid articlePaywall Russian hackers pose as remote IT staff on Microsoft Teams: British companies have been urged to be on high alert as ransomware threat escalates from groups ...
thetimes.com/uk/technology-uk/article/russian-hackers-pose-as-remote-it-staff-on-microsoft-teams-vhpx6ww7m
REvil hacker behind Kaseya ransomware attack gets 13 years in prison: Yaroslav Vasinskyi, a Ukrainian national, was sentenced to 13 years and seven months in ...
bleepingcomputer.com/news/security/revil-hacker-behind-kaseya-ransomware-attack-gets-13-years-in-prison/
Next