Hackers compromise Axios npm package to drop cross-platform malware

Published on March 31, 2026

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver remote access trojans to Linux, Windows, and macOS systems. [...]

Continue reading on website
Other news

Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts

March 31, 2026
Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence (AI) agents to be weaponized by an attacker to gain unauthorized access to sensitive data and compromise an organization's cloud environment.According to Palo Alto Networks Unit 42, the issue relates to how the Vertex AI permission model can be misused

How to Categorize AI Agents and Prioritize Risk

March 31, 2026
AI agent risk isn't equal, it scales with access to systems and level of autonomy. Token Security explains how CISOs should categorize agents and prioritize what to secure first. [...]