AI Deepfakes Help Hackers Compromise npm’s Axios Package and Target Open-Source Maintainers
Security researchers say suspected North Korean hackers used AI deepfakes and phishing to target maintainers of widely used Node.js packages, including axios, lodash, dotenv, and others. In the axios case, malicious package versions briefly slipped into npm and were removed within about three hours, but not before they could deliver credential-stealing malware and potentially give attackers ongoing access to infected systems. Several developers say they were targeted with the same playbook, which uses fake executive identities, convincing Slack workspaces, and virtual meetings to trick victims into installing malware or running troubleshooting commands.
British tourist arrested in Australia after allegedly hiding heroin inside his body
A 52-year-old British man has been arrested at Melbourne Airport after Border Force officers detained him for further checks following a flight from Bangkok. Australian authorities allege scans found more than 90 heroin pellets inside his stomach, with a total weight of 1.1 kilograms. He faces two drug charges, remains in custody, and is due to appear in court on June 17.
Stolen Cars Lead Police on Multiple Chases in South Jersey; One Crashes and Flips
Police in Mantua Township, New Jersey, say stolen vehicles led officers on several chases early Saturday after residents reported people checking car doors in a neighborhood. One Jeep, a Kia, and a Hyundai all fled police; during one pursuit, the Kia sped onto Mercer Avenue, jumped railroad tracks, struck wires, and flipped onto its roof. The people inside ran off, and police later found one injured young suspect nearby and took that person to a hospital. Officers ended the remaining chases after the crash and reminded residents to lock their cars and remove valuables.
Lionel Messi Scores Inter Miami’s First Goal at Nu Stadium in 2-2 Draw with Austin FC
Lionel Messi scored Inter Miami’s first goal at Nu Stadium in Miami, and the match ended in a 2-2 draw with Austin FC on Saturday.
Claude Falls After Security Leaks as Mistral Gains in Weekly AI Popularity Rankings
Claude dropped 5 points to 85% after two security incidents in five days, including a CMS leak and an accidental code upload through npm, while Anthropic also moved subscribers off flat-rate pricing. Mistral posted the biggest gain, up 6 points to 61%, after raising $830 million in debt to build its first owned data center near Paris. ChatGPT edged up 1 point, Gemini rose 4, Grok fell 6, and DeepSeek slipped to 15%.
Man charged after driving into Lao New Year parade crowd in Louisiana
At least 15 people were injured in New Iberia, Louisiana, after authorities say a driver hit pedestrians during a parade celebrating Lao New Year. State police said the man was charged with driving while impaired, 18 counts of first-degree negligent injuring, and careless operation. Some of the injuries are believed to be serious.
Small Plane Makes Emergency Landing on I-78 in Lehigh County; No Injuries Reported
A small plane made an emergency landing Saturday morning on Interstate 78 in Weisenberg Township, Lehigh County, touching down across two eastbound lanes. Drivers saw the aircraft land, and no injuries were reported.
Grooming gang survivor criticizes Labour peer over remarks about national inquiry
A grooming gang survivor has demanded an apology from Labour peer Baroness Ayesha Hazarika after comments made on Times Radio were shared widely online and were seen as mocking the new national inquiry. Ellie Reynolds, who was abused in Barrow-in-Furness as a teenager, called the remarks “sick” and “disgusting” and said survivors deserve a genuine apology. The three-year statutory inquiry into grooming gangs is due to begin on April 13 with a £65 million budget, and its chair has said it will examine the cultural, ethnic, and religious backgrounds of offenders and institutions’ responses.