node.js security

supply-chain-security

Axios Compromised in Supply Chain Attack

A massive supply chain attack has hit the popular npm package Axios. Versions 1.14.1 and 0.30.4 deploy a stealthy Remote Access Trojan (RAT) via a fake dependency. Learn how to detect and remediate this critical threat.

vulnerability

Critical Alert: n8n Arbitrary Code Execution (CVE-2025-68613)

A critical Arbitrary Code Execution vulnerability (CVE-2025-68613) has been discovered in n8n, allowing attackers to execute arbitrary code via workflow expressions. Upgrade to v1.122.0 immediately.