An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...