Axios npm Supply Chain Attack: North Korea Hijacks 100M Downloads
North Korea just weaponized the JavaScript ecosystem. On March 31, 2026, threat actors compromised Axios—the most-downloaded npm package for HTTP requests with 100+ ...
Privacy, vulnerabilities, authentication, and cybersecurity