Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 2 most recent headlines Filtered view
Bank Info Security 3 months, 2 weeks ago

Backdooring of JavaScript Library Axios Tied to North Korea

Expect Fallout After Remote Access Trojan Added to Popular JavaScript NPM PackageA supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software packages, to distribute a cross-platform, remote access Trojan. Identifying the full fallout from the attack could take some time, experts warned.

More from Bank Info Security 2 Apr 2026, 3:30 a.m. JavaScript Library Node.js North Korea Remote Access Trojan Supply Chain Trojan

A supply chain attack hit Axios when attackers used stolen npm credentials to publish malicious versions containing a phantom dependency. This triggered a cross-platform RAT during installation and replaced its files with clean decoys, making detection challenging.

More from Trend Micro Research, News and Perspectives 31 Mar 2026, 1:00 p.m. Compromise Credentials JavaScript Node.js Remote Access Trojan Supply Chain Theft