Industry shifts, security alerts, hardware, and AI/ML Compiled for immediate developer deployment.
calendar_todaysummarizeWeek 14-2026bolt1 CRITICAL
article
axios Compromised on npm: Maintainer Account Hijacked, RAT Deployed
TAG: SECURITY
The npm account of the lead axios maintainer (jasonsaayman) was hijacked on March 31, 2026, and two malicious versions — axios@1.14.1 and axios@0.30.4 — were published within a 39-minute window. Both versions silently added a pre-staged malicious dependency, plain-crypto-js@4.2.1, whose postinstall hook drops a cross-platform remote access trojan contacting the C2 server sfrclak.com:8000. The RAT deploys platform-specific payloads on macOS, Windows, and Linux, then self-destructs, leaving no trace in node_modules. With roughly 100 million weekly downloads, this is one of the highest-impact npm supply chain attacks on record. Affected users should immediately pin to axios@1.14.0 or axios@0.30.3, rotate all credentials, and audit CI/CD pipeline logs for any runs that installed the compromised versions.
Express.js March 2026 Security Releases: Three ReDoS Vulnerabilities in path-to-regexp Patched
TAG: SECURITY
The Express team released security patches for three regular expression denial-of-service (ReDoS) vulnerabilities in the path-to-regexp utility module. CVE-2026-4867 (High) affects versions up to and including 0.1.12, where three or more parameters in a single segment with non-period separators trigger catastrophic backtracking; the fix is version 0.1.13. CVE-2026-4926 (High) affects versions 8.0.0 and above, where sequential optional groups cause exponential regex growth; patched in 8.4.0. CVE-2026-4923 (Medium) also affects versions 8.0.0 through 8.3.0, where multiple wildcards combined with a parameter produce a vulnerable regex; also fixed in 8.4.0. All three vulnerabilities can be triggered by user-controlled route patterns and may allow a denial-of-service condition in affected Express applications.
Securing the Open Source Supply Chain Across GitHub
TAG: SUPPLY CHAIN
GitHub has outlined steps developers can take today and capabilities the platform is building to address an emerging pattern in open-source supply chain attacks, where attackers focus on exfiltrating secrets to publish malicious packages and gain access to additional repositories. Recommended immediate actions include enabling CodeQL for GitHub Actions workflow review, avoiding pull_request_target triggers, pinning third-party Actions to full commit SHAs, and guarding against script injection. GitHub has expanded trusted publishing support — an OpenID Connect token-based alternative to long-lived secrets — across npm, PyPI, NuGet, RubyGems, Crates, and other registries in partnership with the OpenSSF. npm, which handles over 30,000 package publishes daily, scans every new version for malware with human review before takedown to minimize false positives. GitHub is also accelerating its security roadmap for Actions in response to recent attack campaigns including last year's Shai-Hulud incidents.
Node.js Security Bug Bounty Program Paused Due to Loss of Funding
TAG: OPEN SOURCE
The Node.js project has announced a pause to its security bug bounty program, which has run through HackerOne under the Internet Bug Bounty (IBB) initiative since 2016. The IBB program that pooled donation-based funding for Node.js bounties has itself been paused, and as a volunteer-driven open-source project Node.js has no independent budget to sustain payouts on its own. Security reporting through HackerOne remains unchanged, and the Node.js Security Team continues to accept and triage vulnerability reports with the same disclosure policy and response times. No monetary rewards will be offered for reports until dedicated external funding is secured again. The project is inviting organizations that depend on Node.js to contact the OpenJS Foundation about sponsoring a renewed bug bounty program.
Malicious IoliteLabs VSCode Extensions Target Solidity Developers with Multi-Stage Backdoor
TAG: SECURITY
Three VSCode extensions published by IoliteLabs — solidity-macos, solidity-windows, and solidity-linux — were simultaneously updated to version 0.1.8 on March 25, 2026, each embedding an identical multi-stage backdoor across a combined install base of approximately 27,500 developers. The malicious code was hidden inside a tampered copy of the pako compression library (SHA-256: fcd398ab...) rather than the extension entry point, using five obfuscation techniques including Unicode escaping, string reversal, and XOR junk. On Windows, the dropper downloads a Chrome-impersonating MSI (7WhiteSmoke.msi) that installs a hook-based DLL (ntuser) via regsvr32 LOLbin for persistent input monitoring. On macOS, architecture-specific binaries for Intel and Apple Silicon are deployed with LaunchAgent persistence (com.apple.system.updater) and Gatekeeper bypass. The attacker used three separate C2 domains — rraghh.com, cdn.rraghh.com, and oortt.com — for operational resilience. Developers who had any of the three extensions installed after March 25, 2026 should treat their machine as fully compromised and rotate all credentials immediately.
VoidZero March 2026 Recap: Vite 8, Vite+ Open-Sourced, Oxlint JS Plugins, and Void Platform
TAG: TOOLING
VoidZero's March 2026 update marks a significant convergence of its unified JavaScript toolchain. Vite 8 shipped with Rolldown as its new bundler, meaning every Vite user now runs on Oxc under the hood. Vite+ — a single vp binary combining Vite, Vitest, Oxlint, Oxfmt, Rolldown, and tsdown — was fully open-sourced under the MIT license with added Bun package manager support, Svelte templates, and tab completion. Oxlint JS Plugins Alpha launched with near-100% ESLint plugin compatibility and up to 100x faster linting performance, while Oxfmt gained GraphQL template literal formatting and JSDoc comment formatting. Evan You announced Void, a new deployment platform for Vite applications where running void deploy handles build, provisioning, and deployment automatically. Community adoption highlights include Anthropic migrating Claude to TanStack Start + Vite, and Cloudflare saving 3.75 days of compute per day by switching from ESLint to Oxlint.
Claude Code's Source Code Was Leaked via Bun Source Maps
Anthropic accidentally leaked Claude Code's entire source code by including a Bun-generated source map file in the published npm package. The .map file referenced the complete unminified TypeScript source — approximately 390,000 lines of actual code — which was also downloadable as a zip from Anthropic's own R2 storage bucket. Anthropic subsequently issued DMCA takedowns against all GitHub mirrors. The leak exposed several unreleased internal features: Kairos, a persistent background assistant that watches your project and acts autonomously within a 15-second blocking budget; Coordinator Mode, which turns Claude Code into an orchestrator of multiple parallel worker agents; Ultra Plan, a 30-minute remote planning session running on Opus in a cloud container; and an anti-distillation system that injects fake tool definitions into API requests to mislead competitors. Internal code names revealed include Tengu for Claude Code itself, Fennec for Opus 4.6, and Capybara for a model called Mythos. The leak also surfaced an unreleased Tamagotchi-style Buddy system with 18 animated companions across five rarity tiers, and confirmed that swearing at Claude Code is tracked as a negative signal in internal analytics.
axios Compromised on npm: Maintainer Account Hijacked, RAT Deployed
The npm account of the lead axios maintainer (jasonsaayman) was hijacked on March 31, 2026, and two malicious versions — axios@1.14.1 and axios@0.30.4 — were published within a 39-minute window. Both versions silently added a pre-staged malicious dependency, plain-crypto-js@4.2.1, whose postinstall hook drops a cross-platform remote access trojan contacting the C2 server sfrclak.com:8000. The RAT deploys platform-specific payloads on macOS, Windows, and Linux, then self-destructs, leaving no trace in node_modules. With roughly 100 million weekly downloads, this is one of the highest-impact npm supply chain attacks on record. Affected users should immediately pin to axios@1.14.0 or axios@0.30.3, rotate all credentials, and audit CI/CD pipeline logs for any runs that installed the compromised versions.
Claude Code's Source Code Was Leaked via Bun Source Maps
Anthropic accidentally leaked Claude Code's entire source code by including a Bun-generated source map file in the published npm package. The .map file referenced the complete unminified TypeScript source — approximately 390,000 lines of actual code — which was also downloadable as a zip from Anthropic's own R2 storage bucket. Anthropic subsequently issued DMCA takedowns against all GitHub mirrors. The leak exposed several unreleased internal features: Kairos, a persistent background assistant that watches your project and acts autonomously within a 15-second blocking budget; Coordinator Mode, which turns Claude Code into an orchestrator of multiple parallel worker agents; Ultra Plan, a 30-minute remote planning session running on Opus in a cloud container; and an anti-distillation system that injects fake tool definitions into API requests to mislead competitors. Internal code names revealed include Tengu for Claude Code itself, Fennec for Opus 4.6, and Capybara for a model called Mythos. The leak also surfaced an unreleased Tamagotchi-style Buddy system with 18 animated companions across five rarity tiers, and confirmed that swearing at Claude Code is tracked as a negative signal in internal analytics.
Express.js March 2026 Security Releases: Three ReDoS Vulnerabilities in path-to-regexp Patched
The Express team released security patches for three regular expression denial-of-service (ReDoS) vulnerabilities in the path-to-regexp utility module. CVE-2026-4867 (High) affects versions up to and including 0.1.12, where three or more parameters in a single segment with non-period separators trigger catastrophic backtracking; the fix is version 0.1.13. CVE-2026-4926 (High) affects versions 8.0.0 and above, where sequential optional groups cause exponential regex growth; patched in 8.4.0. CVE-2026-4923 (Medium) also affects versions 8.0.0 through 8.3.0, where multiple wildcards combined with a parameter produce a vulnerable regex; also fixed in 8.4.0. All three vulnerabilities can be triggered by user-controlled route patterns and may allow a denial-of-service condition in affected Express applications.
Securing the Open Source Supply Chain Across GitHub
GitHub has outlined steps developers can take today and capabilities the platform is building to address an emerging pattern in open-source supply chain attacks, where attackers focus on exfiltrating secrets to publish malicious packages and gain access to additional repositories. Recommended immediate actions include enabling CodeQL for GitHub Actions workflow review, avoiding pull_request_target triggers, pinning third-party Actions to full commit SHAs, and guarding against script injection. GitHub has expanded trusted publishing support — an OpenID Connect token-based alternative to long-lived secrets — across npm, PyPI, NuGet, RubyGems, Crates, and other registries in partnership with the OpenSSF. npm, which handles over 30,000 package publishes daily, scans every new version for malware with human review before takedown to minimize false positives. GitHub is also accelerating its security roadmap for Actions in response to recent attack campaigns including last year's Shai-Hulud incidents.
Node.js Security Bug Bounty Program Paused Due to Loss of Funding
The Node.js project has announced a pause to its security bug bounty program, which has run through HackerOne under the Internet Bug Bounty (IBB) initiative since 2016. The IBB program that pooled donation-based funding for Node.js bounties has itself been paused, and as a volunteer-driven open-source project Node.js has no independent budget to sustain payouts on its own. Security reporting through HackerOne remains unchanged, and the Node.js Security Team continues to accept and triage vulnerability reports with the same disclosure policy and response times. No monetary rewards will be offered for reports until dedicated external funding is secured again. The project is inviting organizations that depend on Node.js to contact the OpenJS Foundation about sponsoring a renewed bug bounty program.
Malicious IoliteLabs VSCode Extensions Target Solidity Developers with Multi-Stage Backdoor
Three VSCode extensions published by IoliteLabs — solidity-macos, solidity-windows, and solidity-linux — were simultaneously updated to version 0.1.8 on March 25, 2026, each embedding an identical multi-stage backdoor across a combined install base of approximately 27,500 developers. The malicious code was hidden inside a tampered copy of the pako compression library (SHA-256: fcd398ab...) rather than the extension entry point, using five obfuscation techniques including Unicode escaping, string reversal, and XOR junk. On Windows, the dropper downloads a Chrome-impersonating MSI (7WhiteSmoke.msi) that installs a hook-based DLL (ntuser) via regsvr32 LOLbin for persistent input monitoring. On macOS, architecture-specific binaries for Intel and Apple Silicon are deployed with LaunchAgent persistence (com.apple.system.updater) and Gatekeeper bypass. The attacker used three separate C2 domains — rraghh.com, cdn.rraghh.com, and oortt.com — for operational resilience. Developers who had any of the three extensions installed after March 25, 2026 should treat their machine as fully compromised and rotate all credentials immediately.
VoidZero March 2026 Recap: Vite 8, Vite+ Open-Sourced, Oxlint JS Plugins, and Void Platform
VoidZero's March 2026 update marks a significant convergence of its unified JavaScript toolchain. Vite 8 shipped with Rolldown as its new bundler, meaning every Vite user now runs on Oxc under the hood. Vite+ — a single vp binary combining Vite, Vitest, Oxlint, Oxfmt, Rolldown, and tsdown — was fully open-sourced under the MIT license with added Bun package manager support, Svelte templates, and tab completion. Oxlint JS Plugins Alpha launched with near-100% ESLint plugin compatibility and up to 100x faster linting performance, while Oxfmt gained GraphQL template literal formatting and JSDoc comment formatting. Evan You announced Void, a new deployment platform for Vite applications where running void deploy handles build, provisioning, and deployment automatically. Community adoption highlights include Anthropic migrating Claude to TanStack Start + Vite, and Cloudflare saving 3.75 days of compute per day by switching from ESLint to Oxlint.
Week 14 was dominated by supply chain security incidents at an alarming scale. On March 31, the npm account of the lead axios maintainer (jasonsaayman) was hijacked, and two malicious versions — axios@1.14.1 and axios@0.30.4 — were published within a 39-minute window. Both embedded a pre-staged dependency, plain-crypto-js@4.2.1, whose postinstall hook dropped a cross-platform remote access trojan contacting the C2 server sfrclak.com:8000. With roughly 100 million weekly downloads, this is one of the highest-impact supply chain attacks on record. Affected users should immediately pin to axios@1.14.0 or axios@0.30.3 and rotate all credentials. Separately, three IoliteLabs VSCode extensions (solidity-macos, solidity-windows, solidity-linux) were simultaneously updated to version 0.1.8 on March 25 with a multi-stage backdoor hidden inside a tampered pako library, targeting approximately 27,500 Solidity developers.
GitHub responded to the broader pattern with a security blog post recommending CodeQL for Actions workflow review, pinning third-party Actions to full commit SHAs, and expanding OpenID Connect-based trusted publishing across npm, PyPI, NuGet, RubyGems, and Crates. VoidZero's March recap announced Vite 8 shipping Rolldown as its default bundler, Vite+ fully open-sourced under MIT, and Oxlint JS Plugins Alpha with near-100% ESLint compatibility and up to 100x faster linting — with Cloudflare reporting 3.75 days of compute saved per day by switching.
A viral deep-dive revealed that Anthropic accidentally leaked Claude Code's complete TypeScript source (~390,000 lines) via a Bun-generated source map included in the published npm package, exposing unreleased features including Kairos (a persistent background assistant), Coordinator Mode (multi-agent orchestrator), and Ultra Plan (a 30-minute Opus planning session). Anthropic has since issued DMCA takedowns against GitHub mirrors.
Key Takeaways
The axios npm supply chain attack (axios@1.14.1 and @0.30.4, March 31) deployed a cross-platform RAT via plain-crypto-js@4.2.1 postinstall — immediately pin to axios@1.14.0 or @0.30.3 and rotate all credentials.
Three IoliteLabs Solidity VSCode extensions pushed a multi-stage backdoor via a tampered pako library to ~27,500 developers on March 25 — treat any machine with those extensions installed after that date as fully compromised.
Vite 8 now ships Rolldown as its default bundler and Oxlint JS Plugins Alpha offers near-100% ESLint compatibility at up to 100x faster linting speed, with Cloudflare saving 3.75 days of compute daily by switching.
