互联网漏洞赏金计划（IBB）宣布暂停提交与奖励发放，管理方HackerOne表示正在重新评估开源安全的处理方式。该计划自2012年运行至今，已累计奖励超150万美元。随着AI技术加速漏洞发现，漏洞报告数量大幅增加，但修复能力未能同步跟上，导致原有80%用于漏洞发现、20%用于修复的资金分配模式难以为继。Node.js等项目已受到影响，Google和Curl项目也相继对AI生成的漏洞提交设限。

Select Arabian Post as your preferred source on Google and MSN News for trusted business news and Arab politics and updates.

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

North Korean hackers compromised the widely used Axios JavaScript library to infiltrate US companies and steal cryptocurrency ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

开发者广泛使用的Axios HTTP客户端库这一Java组件最近遭到黑客攻击，通过被入侵的账户分发恶意软件。

Axios is published and maintained on npm, the default package registry for JavaScript and Node.js projects. It is used to ...

Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...