人気のJavaScriptライブラリ「axios」が侵害された。北朝鮮に関係するとみられる脅威グループ「UNC1069」は、SlackやMicrosoft ...
Hackers linked to North Korea compromised the widely used Axios npm package by tricking a maintainer into installing malware ...
Phishing surge, LinkedIn tracking claims, spyware use, and rising stealers expose growing abuse of trusted systems.
Hackers infiltrated Axios maintainers using fake Slack channels and Teams calls, then published infected packages.
UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply ...