A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...
Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Cassidy Horton is a finance writer covering banking, life insurance and business loans. She has worked with top finance brands including NerdWallet, MarketWatch and Consumer Affairs. Cassidy first ...