Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...

Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...
Smithsonian Magazine

Elizebeth Smith Friedman Was the U.S. Government’s First Woman Codebreaker. She Cracked Nazi Codes, Saved 8,000 Lives and Pioneered Modern Codebreaking

For decades, Elizebeth Smith Friedman worked in near-total secrecy, cracking codes that shaped the outcome of two world wars.