New Infinity Stealer malware grabs macOS data via ClickFix lures

A batch of BleepingComputer reports covering multiple active threats and incidents: a new macOS info‑stealer called Infinity Stealer (Python payload packaged with Nuitka); a supply‑chain compromise of the Telnyx PyPI package delivering credential‑stealing malware hidden in a WAV file; large‑scale social‑engineering campaigns targeting developers via fake VS Code alerts on GitHub; CISA warning of active exploitation of a critical Langflow flaw (CVE-2026-33017) to hijack AI workflows; an ongoing investigation into an Amazon cloud account breach affecting the European Commission; several phishing