April 1 16 min read Mitigating the Axios npm supply chain compromise On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages for version updates (1.
March 31 10 min read WhatsApp malware campaign delivers VBScript and MSI backdoors A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain.