UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

Anthropic moves to protect proprietary code after a leak involving Claude AI agents. Discover how the company is securing its ...

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar ...

Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found ...

SHENZHEN, GUANGDONG, CHINA, April 3, 2026 /EINPresswire.com/ -- On March 31, 2026, Anthropic released version 2.1.88 of ...

Suspected North Korean hackers have compromised Axios, one of the most widely used JavaScript libraries in American software development, by hijacking a maintainer’s npm account and publishing tainted ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

Another supply chain security threat emerged this week with the compromise of Axios. It is a popular JavaScript HTTP library, but for three hours, it ...

In order to spread Vidar information-stealing malware, threat actors are taking advantage of the recent Claude Code source ...

This is GlassWorm: a software supply chain attack that security researchers are calling one of the most sophisticated and ...