Malicious npm packages evade install-script defenses at runtime

A BleepingComputer security-news feed covering active malware campaigns, software vulnerabilities, AI-agent and sandbox security research, data breaches, ransomware activity, and defensive product updates. Notable items include runtime-based npm supply-chain malware, OpenAI Codex sandbox escapes, malicious extensions hijacking AI browser agents, North Korean WaterPlum infections and cryptocurrency theft, a Gyazo breach affecting 23.6 million records, Rapuncel infostealer distribution through fake GitHub repositories, a critical Check Point root-code-execution flaw, and Android RatHat malware.