AI Coding Exposes Software Supply Chain

Axios library hack exposed millions of devices to malware without touching source code. AI coding tools increase supply chain vulnerabilities by selecting vulnerable dependencies 50% more often than humans. Socket detected the attack in 6 minutes.

Socket

Npm, Inc.

Github

Axios

Andreessen Horowitz

North Korean hackers spread OtterCookie malware via npm

North Korean hackers uploaded 197 malicious npm packages to spread updated OtterCookie malware in the ongoing Contagious Interview campaign.

Socket

Npm, Inc.

Security Affairs

North Korean hackers spread malware via npm packages

North Korean hackers uploaded 197 malicious npm packages, downloaded over 31,000 times, to spread an updated OtterCookie malware variant.

Socket

The Hacker News

Npm, Inc.