New npm supply-chain attack self-spreads to steal auth tokens

Multiple active security incidents and vulnerabilities: a new npm supply‑chain campaign is stealing developer auth tokens and self‑spreading via compromised publisher accounts; Microsoft-related items include a Teams Efficiency Mode rollout, a Graph API code change breaking Universal Print and being abused for stealthy GoGra Linux malware comms, and out‑of‑band critical ASP.NET Core privilege‑escalation patches while >1,300 SharePoint servers remain exposed to an actively exploited spoofing zero‑day. CISA flagged an actively exploited Catalyst SD‑WAN flaw; Shadowserver found ~6,400 Apache Acti