On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...

An HTTP server that proxies Docker image downloads as tar archives on-the-fly. Designed for network devices (like Cisco routers/switches) that need to download Docker images via simple HTTP requests.

Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...

IT News Africa is the continent’s leading source for technology news, delivering the latest updates for IT professionals and tech enthusiasts, while hosting technology-focused events across Africa.