Technology ❯ Software Development

JavaScript

Node.js V8 Engine React NPM Package Management Open Source Software npm Developer Tools NPM Packages Debugging

Hijacked Axios Maintainer Account Pushed Malicious npm Releases That Dropped Cross-Platform RAT

Security firms report measurable execution despite a brief exposure due to the library’s vast footprint.

Stories older than 24h

Linux Foundation Launches React Foundation as Meta Transfers React and React Native

Public Exploits Detail n8n Sandbox Escape That Lets Workflow Users Take Over Servers

Researchers Uncover Years-Long Magecart Skimmer Targeting Major Card Networks

Google Links More State Groups to React2Shell as Wallet-Draining Attacks Spread

Google Ships Emergency Chrome Patch for Eighth 2025 Zero-Day Exploit

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

Anthropic Acquires Bun to Power Claude Code After $1 Billion Run-Rate Milestone

Google Details 'BadAudio' Malware Behind APT24’s Multi‑Year Espionage

CISA Orders Chrome Zero-Day Fix as Google Rushes V8 Patch

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures

Microsoft Restricts IE Mode in Edge After Zero-Day Exploits

CERT Warns as Shai-Hulud npm Supply-Chain Attack Tops 500 Packages

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage

Major NPM Supply-Chain Breach Hits Popular Packages After Maintainer Phished

Chrome Patch Thwarts Active V8 Zero-Day as CISA Mandates Federal Updates

Emergency Chrome Update Fixes Actively Exploited Zero-Day Bug