New ChainDrop worm poisons over 1,300 npm packages, Keyv and Cacheable among those hit

Another Shai-Hulud variant hits npm packages, worming its way into hundreds of packages.
The Hacker News

DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

DPRK-linked macOS malvertising uses fake updates and ClickFix to install a backdoor that fetches a stealer targeting 157 ...