Malicious npm packages evade install-script defenses at runtime

A BleepingComputer security-news feed covering active malware campaigns, software supply-chain attacks, AI-agent sandbox escapes and browser-agent hijacking, major data breaches, state-sponsored cybercrime, ransomware activity, and critical product vulnerabilities. Notable items include the WaterPlum North Korean campaign infecting at least 30,000 devices, a Gyazo breach exposing 23.6 million records, runtime-based npm malware, Rapuncel infostealer distribution through fake GitHub repositories, RatHat Android malware, and a Check Point flaw enabling root-level code execution.