Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...