All future Fire TV Sticks will indeed run on Vega OS, Amazon’s proprietary operating system. The first device to feature this new OS was the Fire TV Stick 4K Select, launched in October 2025. Following closely, the new Fire TV Stick HD was released in April 2026 and also runs on Vega OS.

Vega OS is built directly on Linux, which differentiates it from its predecessor, Fire OS, that was based on Android. This shift suggests a strategic move by Amazon to create a more tailored environment for its streaming devices. However, Vega OS does not support sideloading of apps—a feature many users enjoyed with previous models.

Currently, Amazon’s App Store lists around 3,000 apps available for Vega OS devices. In contrast, Android-based Fire TV sticks offer approximately 40,000 apps. This significant difference raises questions about app availability and user experience on the new platform.

The design of Vega OS aims to resemble Fire OS but is reportedly less demanding on hardware. The new Fire TV Stick HD model is also 30% slimmer and over 30% faster than its predecessor. But it lacks support for Dolby Vision and Dolby Atmos audio formats—features that many users have come to expect.

To bridge the app gap, Amazon plans to stream some Android-based Fire OS apps in the cloud on Vega devices. This cloud-based solution could help mitigate the limitations of app availability on Vega OS.

Amazon has been developing Vega OS for years. Initially tested on Echo Show smart displays, it is now making its debut on Fire TV devices. The transition signifies Amazon’s commitment to enhancing user experience through improved performance and integration.

As further developments unfold in this space, details remain unconfirmed regarding additional features or future models beyond those already announced. The evolution of Amazon’s streaming technology continues to attract attention as it adapts to meet consumer needs.

The post Amazon Vega OS Fire TV: A New Era for Streaming Devices appeared first on News Casino.

On March 31, 2026, the npm account of an axios maintainer was compromised, leading to the publication of two malicious versions of the popular JavaScript library. The versions, labeled v1.14.1 and v0.30.4, were available for download for approximately three hours before being removed from the npm registry.

The malicious packages included a dependency on a trojanized package named plain-crypto-js, which was designed to execute platform-specific payloads. These payloads functioned as lightweight remote access trojans (RATs), posing significant risks to users and organizations utilizing axios in their applications.

Axios is widely used for making HTTP/S requests in JavaScript applications, and the attack had a considerable impact, affecting approximately 80% of cloud and code environments that rely on the library. The malicious versions of axios were downloaded around 100 million times per week, raising concerns about the potential scale of the compromise.

According to reports, the malicious versions included a dropper that could download and execute additional payloads on affected systems. Initial assessments indicated that about 3% of environments observed execution of the malicious code, with beacons reaching out to a command and control (C2) server every 60 seconds.

Organizations are strongly advised to audit their environments for potential execution of these versions. The attack was particularly significant due to axios’s extensive use as a transitive dependency across millions of applications, which could lead to widespread vulnerabilities.

Experts noted that the attacker may have gained access to repository access, signing keys, API keys, or other sensitive information that could be used to backdoor future releases or compromise backend systems and users. Additionally, any post-infection inspection of the package manifest for plain-crypto-js would reveal a clean appearance, complicating detection efforts.

This incident underscores the importance of security in open-source software development and the need for vigilant monitoring of dependencies. As the situation develops, further information may emerge regarding the extent of the impact and the measures organizations should take to protect their systems.

The post Axios Maintainer Account Compromised, Malicious Versions Published appeared first on News Casino.