Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
はじめに：これは「エンジニアの話」ではない 2026年3月31日。世界中の開発者が使う「axios」というソフトウェア部品が乗っ取られた。 🚨 CRITICAL: Active supply chain attack on axios -- one ...
An extremely popular NPM package used in many JavaScript projects has been compromised and can wreak havoc on your machine if ...
Cryptopolitan on MSN
Axios supply chain attack raises risk to crypto wallets
Up to four npm packages on Axios were replaced with malicious versions, in one of the most sophisticated supply chain attacks ...
A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...
Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...
チェコのJetBrainsは3月19日（現地時間）、統合開発環境「IntelliJ ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
APIがロック、Android 17向けアプリを「Google Play」に公開できるように「Google Meet」に自動言語検出機能が追加 会議で話されている言語を検出して議事録、要約メモ、録画字幕に反映Google、Android ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
一部の結果でアクセス不可の可能性があるため、非表示になっています。
アクセス不可の結果を表示する