The Tech Edvocate

North Korean Hackers Exploit Axios NPM Package in Major Supply Chain Attack

Spread the loveIn a worrying development for the cybersecurity landscape, North Korean hackers have successfully infiltrated the widely-used Axios NPM package, introducing backdoored versions of the ...

6つの脆弱性を用いたiOS向けエクスプロイトチェーン「DarkSword」の存在をGoogleなどが発見

Googleの脅威インテリジェンスグループ(GTIG)が、複数のゼロデイ脆弱性を利用してiOS端末を完全に侵害するフルチェーンエクスプロイトの発見を報告しています。コード内の変数から「DarkSword」と呼ばれているとみられるこのエクスプロイトは、 ...
InfoWorld

Anthropic employee error exposes Claude Code source

A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary ...
The Tech Edvocate

Google Links Axios npm Package Attack to North Korean Cybercriminals

Spread the loveIn a significant revelation in the landscape of cybersecurity, Google has attributed a recent supply chain attack targeting the popular Axios npm package to a North Korean threat group ...

数億台のiPhoneをハックできるエクスプロイト「DarkSword」マルウェア ...

複数のゼロデイ脆弱(ぜいじゃく)性を利用してiOS端末を侵害するエクスプロイト「DarkSword」が2026年3月にGoogleの脅威インテリジェンスグループによって報告されました。IT系ニュースサイトのTechCrunchが、このDarkSwor ...
The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
WinBuzzer

Trivy Breached Twice in a Month via GitHub Actions

Attackers have hijacked 75 of 76 GitHub Actions tags for Aqua Security's Trivy scanner, distributing credential-stealing ...

Anthropic Claude code leak reveals secrets—self-healing memory, undercover mode, KAIROS ...

A single accidental file release has exposed the internal architecture of one of the most advanced AI coding systems ever ...
Cybernews

Code trust crisis: Is it safe to update your system during an active supply chain attack?

Language package managers like pip, npm, and others pose a high risk during active supply chain attacks. However, OS updates ...
The Hacker News

North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware

North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...