With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
go-fileconv is a Command Line Utility and Go Library for converting files between different formats like JSON, CSV, Apache Parquet etc. Powered by DuckDB ./fileconv ...
Update: Article updated with comments from security researchers who believe this should not be considered a vulnerability. Update 2: CERT has retracted its bulletin and MITRE has rejected the CVE on ...
Janice is a desktop app for viewing large JSON files. It's key features are: To run Janice just download and unzip the latest release to your computer. Janice ships as a single executable file that ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results