Hackers linked to North Korea compromised the widely used Axios npm package by tricking a maintainer into installing malware disguised as a Microsoft Teams error fix, turning one of the most popular ...

Anthropic confirmed it quickly. Human error. No customer data exposed. A debugging file got accidentally bundled into a routine npm update. That file pointed to a zip ...