#supply-chain-security

Articles tagged with #supply-chain-security

Apr 3, 2026
Apr 3, 20266 min read9 views
The Axios npm supply chain attack: a North Korean trojan inside the world's most popular HTTP library
On March 31, 2026, someone hijacked the npm account of the lead Axios maintainer and published two poisoned versions of one of the most-downloaded packages in the JavaScript ecosystem. Axios pulls over 100 million weekly downloads. If you've built an...
6 min read9 views
Apr 3, 2026
Apr 3, 20268 min read10 views
The Claude Code leak: 512,000 lines, one misconfigured file, and the future of AI IP protection
At roughly 4 AM UTC on March 31, 2026, Anthropic pushed version 2.1.88 of its @anthropic-ai/claude-code package to the npm registry. Inside was a 59.8 MB source map file that should never have shipped. That single file contained pointers to the compl...
8 min read10 views

#supply-chain-security - Hintas