CVE-2026-40175: Cách Axios Biến Prototype Pollution Thành Toàn Bộ Cloud Compromise
Phân tích sâu về gadget chain của Axios giúp escalate prototype pollution thành RCE và bypass AWS IMDSv2. CVSS 9.9.
Blog
Thẻ: #axios
Xem tất cả thẻ
- # mcp
- # security
- # supply-chain
- # devops
- # ai
- # ai-security
- # python
- # Agents
- # ai-agents
- # claude
- # claude-code
- # cursor
- # cve
- # cybersecurity
- # npm
- # terminal
- # agentic-ai
- # ai-infrastructure
- # aws
- # axios
- # data-engineering
- # developer-tools
- # dotfiles
- # Free Threading
- # frontend
- # github-copilot
- # litellm
- # malware
- # migration
- # mythos
- # neovim
- # performance
- # rust
- # tieng-viet
- # vietnamese
- # vulnerability
- # workflow
- # zero-day
- # a2a
- # aerospace
- # agent-security
- # agent-skills
- # agentic-workflows
- # AI systems
- # ai-architecture
- # AI-safety
- # ai-tooling
- # Apple
- # APT
- # architecture
- # argocd
- # beads
- # best-practices
- # Budget
- # byteDance
- # canisterworm
- # Catppuccin
- # chrome-devtools
- # cicd
- # cli
- # Code generation
- # coding-agents
- # commoditization
- # Context engineering
- # CPython
- # CSS
- # cve-2026-7482
- # Data Science
- # database
- # debugging
- # deep-reasoning
- # defense-in-depth
- # design-tools
- # developer-experience
- # developer-tooling
- # dirty-frag
- # docker
- # Ecosystem
- # figma
- # firefox
- # floci
- # Frontier models
- # gemini
- # Gemma
- # gguf
- # git
- # github-actions
- # governance
- # Harness
- # Healthcare AI
- # Homelab
- # incident-response
- # JavaScript
- # jit
- # kubernetes
- # langchain
- # Lazy Imports
- # lighthouse
- # linux-kernel
- # LLM
- # local-dev
- # local-llm
- # localstack
- # looped-llm
- # macos
- # Maturity
- # memory
- # meta-learning
- # minimax
- # mle-bench
- # monorepo
- # mozilla
- # multi-agent
- # nghiên-cứu-lỗ-hổng
- # nodejs
- # North Korea
- # nushell
- # oauth
- # ollama
- # Open models
- # OpenClaw
- # OWASP
- # pandas
- # PEP
- # polars
- # Portfolio
- # prediction
- # production-ai
- # productivity
- # protocols
- # prototype-pollution
- # pyscript
- # Python 3.14
- # Python 3.15
- # rce
- # Release
- # Research
- # responsible-disclosure
- # ruff
- # Self-distillation
- # self-improvement
- # Side project
- # sql-injection
- # Stanford
- # stow
- # task-graph
- # terraform
- # tmux
- # vercel
- # Web Development
- # window-manager
- # worm
- # zero-trust
- # zsh
Cuộc Compromise Axios npm: Đòn Tấn công Supply Chain Từ Bắc Hàn
Ngày 31/3/2026, nhóm APT Bắc Hàn Sapphire Sleet đã xâm phạm các package Axios trên npm, phát tán malware cài đặt RAT trên máy developer toàn cầu.