·HSK 4

North Korea
Cháoxiǎn
朝鲜
hacker
hēikè
黑客
to breach
rùqīn
入侵
open-source
kāiyuán
开源
software tool
gōngjù
工具
Axios (JavaScript library)
Axios
Axios
，
hundreds of thousands of
shù shí wàn gè
数十万个
developer
kāifā zhě
开发者
access credentials
píngzhèng
凭证
to face
miànlín
面临
leakage risk
xièlòu
泄露
risk
fēngxiǎn
风险
。

linked with

yǔ

与

North Korea

Cháoxiǎn

朝鲜

associated with

yǒu guānlián de

有关联的

hacker

hēikè

黑客

breached

rùqīn le

入侵了

open-source

kāiyuán

开源

software tool

gōngjù

工具

Axios (JavaScript library)

Axios

，

and also

bìng

并

to implant

zhírù

植入

malicious

èyì

恶意

backdoor

hòumén

后门

code

dàimǎ

代码

。

Google

Gǔgē

谷歌

threat intelligence

wēixié qíngbào

威胁情报

team

tuánduì

团队

to warn

jǐnggào

警告

，

this incident

cǐ cì

此次

supply chain

gōngyìng liàn

供应链

attack

gōngjī

攻击

scope of impact

yǐngxiǎng fànwéi

影响范围

wide-ranging

guǎngfàn

广泛

，

possibly

kěnéng

可能

to spread to / affect

bōjí

波及

global

quánqiú

全球

hundreds of thousands of

shù shí wàn gè

数十万个

application / app

yìngyòng chéngxù

应用程序

。

April 1, 2026 at 10:00 PM

linked with

yǔ

与

North Korea

Cháoxiǎn

朝鲜

associated with

yǒu guānlián de

有关联的

hacker

hēikè

黑客

breached

rùqīn le

入侵了

widely used

guǎng shòu

广受

developer

kāifā zhě

开发者

used by

shǐyòng de

使用的

open-source

kāiyuán

开源

software

ruǎnjiàn

软件

tool

gōngjù

工具

Axios (JavaScript library)

Axios

，

and also

bìng

并

to implant

zhírù

植入

malicious

èyì

恶意

backdoor code

hòumén dàimǎ

后门代码

。

Axios (JavaScript library)

Axios

shì

是

a type of

yī kuǎn

一款

used for

yòngyú

用于

network requests

wǎngluò qǐngqiú

网络请求

structural particle

的

JavaScript (programming language)

JavaScript

tool

gōngjù

工具

，

every week

měi zhōu

每周

download volume

xiàzài liàng

下载量

exceeding

chāoguò

超过

tens of millions of times

shù qiān wàn cì

数千万次

，

passive marker

bèi

被

global

quánqiú

全球

numerous

zhòngduō

众多

enterprise / company

qǐyè

企业

and

hé

和

application / app

yìngyòng chéngxù

应用程序

widely adopted

guǎngfàn cǎiyòng

广泛采用

。

according to

jù

据

Google

Gǔgē

谷歌

threat intelligence

wēixié qíngbào

威胁情报

team

tuánduì

团队

analysis

fēnxī

分析

，

attacker

gōngjī zhě

攻击者

took control of

kòngzhì le

控制了

Axios (JavaScript library)

Axios

project

xiàngmù

项目

structural particle

的

one

yī gè

一个

maintenance

wéihù

维护

account

zhànghù

账户

，

subsequently

suíhòu

随后

published / released

fābù le

发布了

two

liǎng gè

两个

containing

hányǒu

含有

backdoor

hòumén

后门

structural particle

的

malicious version

èyì bǎnběn

恶意版本

。

these

zhèxiē

这些

malicious versions

èyì bǎnběn

恶意版本

can / able to

kěyǐ

可以

to steal

qièqǔ

窃取

user

yònghù

用户

device

shèbèi

设备

on the

shàng de

上的

access credentials

fǎngwèn píngzhèng

访问凭证

，

and

bìng

并

transmit them

jiāng qí

将其

send to

chuánsòng gěi

传送给

attacker

gōngjī zhě

攻击者

，

thereby

cóngér

从而

for

wèi

为

further

jìn yī bù de

进一步的

cyberattack

wǎngluò gōngjī

网络攻击

to create conditions

chuàngzào tiáojiàn

创造条件

。

Google

Gǔgē

谷歌

researchers

yánjiū rényuán

研究人员

to state

biǎoshì

表示

，

this

cǐ cì

此次

attack

gōngjī

攻击

scope of impact

yǐngxiǎng fànwéi

影响范围

wide-ranging

guǎngfàn

广泛

and

qiě

且

to possess

jùyǒu

具有

ripple effect

liánsuǒ xiàoyìng

连锁效应

，

possibly

kěnéng

可能

already

yǐ yǒu

已有

hundreds of thousands of

shù shí wàn gè

数十万个

credentials

píngzhèng

凭证

stolen / compromised

zāo qiè

遭窃

。

security expert

ānquán zhuānjiā

安全专家

to recommend

jiànyì

建议

all

suǒyǒu

所有

using

shǐyòng

使用

Axios (JavaScript library)

Axios

structural particle

的

developer

kāifā zhě

开发者

immediately

lìjí

立即

to check

jiǎnchá

检查

project

xiàngmù

项目

dependencies

yīlài xiàng

依赖项

，

and

bìng

并

to update to

gēngxīn zhì

更新至

official

guānfāng

官方

verified

yànzhèng de

验证的

safe / clean version

ānquán bǎnběn

安全版本

。

this

cǐ cì

此次

incident

shìjiàn

事件

once again

zàicì

再次

to trigger

yǐnfā

引发

the wider public

wàijiè

外界

regarding

duì

对

open-source software

kāiyuán ruǎnjiàn

开源软件

supply chain

gōngyìng liàn

供应链

security

ānquán

安全

structural particle

的

heightened attention

gāodù guānzhù

高度关注

。

New Words

Téngxùn

腾讯

Tencent

yóuxì

游戏

game

yóuxì kāifā

游戏开发

game development

AAA jí yóuxì

AAA级游戏

AAA game

quánqiú shìchǎng

全球市场

global market

guójì

国际

international

wénhuà shūchū

文化输出

cultural export

shōurù láiyuán

收入来源

revenue source

News in English

Science & Technology

North Korea-Linked Hackers Breach Axios Open-Source Library, Putting Hundreds of Thousands of Developer Credentials at Risk

North Korea-linked hackers breached the Axios open-source library, inserting malicious backdoor code. Google threat intelligence warned the supply chain attack could affect hundreds of thousands of applications worldwide.

Tencent announced investment in a new game development studio focused on AAA titles for global markets. The $500 million investment aims to expand Tencent's international gaming presence.

Tencent's existing game portfolio generated over 50 billion yuan in revenue last year.

The company plans to release five major game titles globally in the next two years.

CEO Ma Huateng emphasized Tencent's commitment to cultural exports through gaming.

Tencent expects gaming to remain a core revenue driver for the company.

New Words

News in English

North Korea-Linked Hackers Breach Axios Open-Source Library, Putting Hundreds of Thousands of Developer Credentials at Risk

More in Science & Technology