NPM packages download malware: Popular HTTP client Axios compromised - | Golem.de
golem.de/news/npm-pakete-laden-malware-nach-populaerer-http-client-axios-kompromittiert-2603-207094.html
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
Similar to This
Previous
Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
Red Hat npm packages compromised to steal developer credentials: More than 30 npm packages under Red Hat's '@redhat-cloud-services' namespace were ...
bleepingcomputer.com/news/security/red-hat-npm-packages-compromised-to-steal-developer-credentials/
Worm in the NPM ecosystem: Several Red Hat software packages compromised - | Golem.de
golem.de/news/wurm-im-npm-oekosystem-mehrere-softwarepakete-von-red-hat-kompromittiert-2606-209295.html
dlvr.it May 19
Shai-Hulud keeps burrowing: 314 npm packages infected after another account compromise
theregister.com/cyber-crime/2026/05/19/shai-hulud-keeps-burrowing-314-npm-packages-infected-after-another-account-compromise/5242601
dlvr.it May 15
OpenAI caught in TanStack npm supply chain chaos after employee devices compromised
theregister.com/security/2026/05/15/openai-caught-in-tanstack-npm-supply-chain-chaos-after-employee-devices-compromised/5241019
Supply chain attack: Hundreds of NPM and PyPI packages compromised - | Golem.de: The hacker group TeamPCP is once again digging through countless NPM and Python ...
golem.de/news/supply-chain-angriff-hunderte-von-npm-und-pypi-paketen-kompromittiert-2605-208562.html
Supply chain attack: Several SAP software projects compromised - | Golem.de: Attackers have injected malicious code into SAP's NPM packages to steal access ...
golem.de/news/supply-chain-angriff-mehrere-softwareprojekte-von-sap-kompromittiert-2604-208187.html
Supply chain attack on password manager: Bitwarden’s NPM package compromised - Golem.de
golem.de/news/supply-chain-angriff-auf-passwortmanager-npm-paket-von-bitwarden-kompromittiert-2604-207974.html
Hackers compromise Axios npm package to drop cross-platform malware: Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ ...
bleepingcomputer.com/news/security/hackers-compromise-axios-npm-package-to-drop-cross-platform-malware/
Hacker hijacks Axios open-source project, used by millions, to push malware: A hacker inserted malware in Axios, an open-source web tool downloaded tens of ...
techcrunch.com/2026/03/31/hacker-hijacks-axios-open-source-project-used-by-millions-to-push-malware/
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
Hackers steal 1.8 terabytes of data from PC peripheral vendor Logitech — firm says zero-day vulnerability to blame, no sensitive information stolen
tomshardware.com/tech-industry/hackers-steal-1-8tb-of-data-from-pc-peripheral-vendor-logitech-firm-says-zero-day-vulnerability-to-blame-no-sensitive-information-stolen
New major npm attack: Hundreds of packages infected with self-replicating malware
heise.de/news/Neuer-NPM-Grossangriff-Selbst-vermehrende-Malware-infiziert-Dutzende-Pakete-10651111.html
Supply chain attack: NPM packages with billions of downloads compromised - | Golem.de
golem.de/news/supply-chain-angriff-npm-pakete-mit-milliarden-von-downloads-kompromittiert-2509-199901.html
Developers should act: Malware injected into prominent JavaScript projects - | Golem.de
golem.de/news/entwickler-sollten-handeln-malware-in-prominente-javascript-projekte-eingeschleust-2507-198445.html
Next