In a newly disclosed supply-chain attack, an npm package “postmark-mcp” was weaponized to stealthily exfiltrate emails, ...
CERT-In, India's cybersecurity agency, warns startups and IT firms about a Dune-inspired malware, 'Shai-Hulud', targeting the npm ecosystem.