Tag: Security
-
The Recent Node And PHP Security Vulnerabilities And What You Need To Do
During the past week, the Hubs community was made aware of a security vulnerability regarding Node and the Brotli decoder, which you can read more about here: Simultaneously, the Hubs community addressed the PHP vulnerability, known as PHP2Shell, affecting hubsfoundation.org (which we took offline for a bit and updated). For the Node/Brotli security vulnerability, we…
-
How Hubs is impacted by the Axios hack
On March 30, 2026, compromised versions of Axios npm packages were released that would automatically install a Remote Access Trojan. The window of distribution was between Monday, March 30, 2026 at 7:59 PM EDT and Tuesday, March 31, 2026 at 12:26 AM EDT. As far as we know, none of the Hubs Foundation GitHub repositories…