Microsoft

Mitigating the Axios npm supply chain compromise

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Hackers compromise Axios npm package to drop cross-platform malware

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
The Hacker News

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
GitHub

iloveyouit/powershell-automation-toolkit

This repository contains a comprehensive collection of production-ready PowerShell scripts designed for enterprise IT infrastructure management. All scripts include ...
Redmond Magazine

Best Practices for PowerShell Script Version Control, Part 2

Keep each script version focused on a single change type (patches for fixes, minors for features, majors for breaking changes). Retain all prior versions and never modify an existing release; copy to ...
Security Boulevard

Fake Temu Coin airdrop uses ClickFix trick to install stealthy malware

A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.
GitHub

Python module to manage persistent PowerShell sessions, with support for command execution, JSON result parsing, and secure error handling.

py-pwsh-session is a modern, lightweight Python wrapper that provides seamless integration with PowerShell sessions. Built for developers who need reliable, persistent PowerShell automation in their ...
Redmond Magazine

Challenges With Using RemoteApp to Host Custom Applications Part 2

RemoteApp cannot directly execute PowerShell .PS1 files -- a .CMD launcher script can be used to call powershell.exe and run the script. Execution policy and blocked script files can prevent ...