Buy Crypto- Markets
Futures- Spot
- Copy Trade
- Earn
- More
The Axios library was attacked through a supply chain, with hackers using stolen npm tokens to implant a remote trojan, affecting about 80% of cloud environments
The attacker stole the npm access token of the chief maintainer of Axios, the most popular HTTP client library for JavaScript, and used that token to publish two malicious versions containing cross-platform remote access trojans (RATs) (axios@1.14.1 and axios@0.3.4), targeting macOS, Windows, and Linux systems. The malicious packages were removed from the npm registry about 3 hours after being published.
According to data from security company Wiz, Axios is downloaded over 100 million times weekly and exists in about 80% of cloud and code environments. Security company Huntress detected the first infections just 89 seconds after the malicious packages went live and confirmed that at least 135 systems were compromised during the exposure window. Notably, the Axios project had previously deployed modern security measures such as OIDC trusted publishing mechanisms and SLSA provenance proofs, but the attacker completely bypassed these defenses. Investigations revealed that while configuring OIDC, the project retained the traditional long-lived NPM_TOKEN, and npm defaults to using the traditional token when both coexist, allowing the attacker to publish without breaching OIDC.
You may also like
Why a Million-Follower Crypto KOL Chooses WEEX VIP?
Discover why top crypto KOL Carl Moon partnered with WEEX. Explore the WEEX VIP ecosystem, 1,000 BTC protection fund, and exclusive rewards for serious traders.
CoinEx Founder: The Crypto Endgame in My Eyes
Spark Coin (SPK): Explodes 73% as Aave Bleeds $15B, A Good Investment Now?
Spark coin (SPK) surged 73% as $15 billion fled Aave after the KelpDAO hack. This article explains what Spark is, why it’s pumping, and whether it is a good investment right now.
As Aave's building collapses, Spark's high-rise is rising
RootData: Q1 2026 Cryptocurrency Exchange Transparency Research Report
What Is Memecoin Trading? A Beginner's Guide to How It Works, the Risks, and 2026's Hottest Tokens
Memecoins surged 30%+ at the start of 2026 while Bitcoin was flat. RAVE spiked 4,500% then crashed 90% in days. MAGA jumped 350% overnight. This guide explains exactly how memecoin trading works — and how to not blow up your account doing it.
Trump Extends Ceasefire: Bitcoin Hits $79K — What Crypto Traders Need to Know Right Now
Bitcoin surged past $79,000 after Trump extended the ceasefire indefinitely. We break down exactly what happened, how every major crypto reacted, and what traders should watch next — including the one level that could unlock an $85,000 BTC rally.
CHIP Crypto Price Prediction 2026: Can USD.AI's GPU Lending Token Reach $1?
CHIP's 24-hour trading volume hit $1.87 billion on a $236 million market cap — an 8x ratio that almost never happens on legitimate tokens. We explain what's driving it, what USD.AI actually does for GPU tokenization, and whether CHIP belongs in your AI crypto portfolio.
RootData: Q1 2026 Web3 Industry Investment Research Report
USDC is the only AI token
The voice of a senior Polymarket user: In fact, we have already been surpassed by our competitors
Transcript of Dr. Han, founder of Gate, speaking at the University of Hong Kong: Breaking the Matthew Effect and Winning in Asymmetric Competition
Who will replace AAVE as the new king?
Fu Peng 2026 First Public Speech: What Exactly Are Crypto Assets? Why Did I Join the Crypto Asset Industry?
Lattice Capital Founder: Crypto VC, Seeing is Believing Because of Faith
The Pitch Is Set. So Is the Trade: CHZ, SportFi, and the UCL Window That Won't Wait
CHZ is gaining momentum as SportFi narratives accelerate alongside the UEFA Champions League（UCL） and global football cycles. This article explores how CHZ, fan tokens, and the broader SportFi ecosystem are driven by real-world events, market narratives, and capital flows—offering insights into why SportFi is emerging as one of the most dynamic sectors in crypto.
Morning Report | SpaceX acquires Cursor for $60 billion; Kalshi and Polymarket launch perpetual contract trading; NeoCognition completes $40 million financing
IMF | The Future of Stablecoins and Payments: Evidence from Financial Markets
Why a Million-Follower Crypto KOL Chooses WEEX VIP?
Discover why top crypto KOL Carl Moon partnered with WEEX. Explore the WEEX VIP ecosystem, 1,000 BTC protection fund, and exclusive rewards for serious traders.
CoinEx Founder: The Crypto Endgame in My Eyes
Spark Coin (SPK): Explodes 73% as Aave Bleeds $15B, A Good Investment Now?
Spark coin (SPK) surged 73% as $15 billion fled Aave after the KelpDAO hack. This article explains what Spark is, why it’s pumping, and whether it is a good investment right now.
As Aave's building collapses, Spark's high-rise is rising
RootData: Q1 2026 Cryptocurrency Exchange Transparency Research Report
What Is Memecoin Trading? A Beginner's Guide to How It Works, the Risks, and 2026's Hottest Tokens
Memecoins surged 30%+ at the start of 2026 while Bitcoin was flat. RAVE spiked 4,500% then crashed 90% in days. MAGA jumped 350% overnight. This guide explains exactly how memecoin trading works — and how to not blow up your account doing it.
App