How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

This Week in Cybersecurity: North Korea's 88-Minute npm Heist, FortiBleed's 86,000 Cracked VPN Logins, and Tata Electronics Leaks Apple and Tesla Trade Secrets

calendar_today June 23, 2026 person Mollie Horne domain openvpn

On June 17, a North Korean state actor compromised a single forgotten npm contributor account and — in 88 minutes — poisoned 144 packages used by more than a million JavaScript developers building AI applications. The payload hunted for cryptocurrency wallet credentials and authentication tokens across Windows, macOS, and Linux alike. On the same day, security researchers disclosed a critical…

open_in_new Read original post