Axios Supply Chain Attack Exposes Developers to Hidden Malware
Hijacked Axios maintainer npm Account pushed malicious versions with a RAT, affecting macOS, Windows, and Linux systems across the JavaScript ...
Tag: JavaScript
Happy DOM Security Flaw (CVE-2025-61927) Enables VM Context Escape and Remote Code Execution
A critical flaw (CVE-2025-61927) in Happy DOM lets attackers escape the VM context, risking remote code execution in versions 19 ...
Critical Splunk Vulnerabilities Expose Platforms to Remote JavaScript Injection and More
Splunk disclosed six critical vulnerabilities, including XSS and SSRF flaws, affecting Enterprise and Cloud. Urgent patches and mitigations are advised.
CrowdStrike Among Those Hit in NPM Attack Campaign
More than 20 CrowdStrike NPM packages were among nearly 200 NPM packages hit by a sophisticated supply chain attack. The ...
Microsoft Spots TikTok Flaw That Compromises Account with One Click
The TikTok vulnerability could allow cyber attackers to access, modify and misuse sensitive details including pictures, videos, messages, and more.
Q1 2026 Threat Reports
❮
❯
