Researchers expose Discord webhook C2 in npm, PyPI, RubyGems; North Korean actors published 338 malicious npm packages with ...
Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.