Klue Supply Chain Breach: Icarus Hits HackerOne, Snyk and 8 More Firms
Icarus hacked Klue via a legacy OAuth credential, harvesting tokens to steal Salesforce data from HackerOne, Snyk, Recorded Future and 7 other firms. June 2026.
·9 min read
Topic
2 articles
Icarus hacked Klue via a legacy OAuth credential, harvesting tokens to steal Salesforce data from HackerOne, Snyk, Recorded Future and 7 other firms. June 2026.
North Korea hijacked the axios npm package on March 31, deploying a RAT in versions 1.14.1 and 0.30.4 for 3 hours. 100M weekly downloads in the blast radius. Check your node_modules now.