Elastic Security Labs quickly spotted the unfolding supply-chain attack that backdoored the popular JavaScript library Axios, ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute malware via a compromised account. Attackers exploited a hijacked account on npm ...

The Cybersecurity and Infrastructure Security Agency (CISA) has released an alert to provide guidance in response to the ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...

The supply chain attack on third-party library Axios has forced OpenAI to revoke its code-signing certificate and require ...

OpenAI is one of many organizations affected by the recent Axios supply chain attack attributed to North Korean hackers.

Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks.

All macOS users must update their OpenAI apps, including ChatGPT, to the latest versions following a security incident, ...

OpenAI rotated macOS code‑signing certificate after Axios supply chain breach Malicious Axios 1.14.1 pulled into app‑signing ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...