Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor

A cluster of high-impact incidents and vulnerabilities affecting open-source ecosystems, enterprise security products, Linux systems, and supply chains. Notable items: Showboat, a modular Linux post-exploitation backdoor (SOCKS5 proxy) used against a Middle East telecom; multiple supply-chain compromises (poisoned Nx Console VS Code extension leading to GitHub internal repo exfiltration, compromised GitHub Actions tags, npm package poisoning including TanStack/@antv, and a Grafana GitHub exposure); Microsoft warnings about actively exploited Defender privilege-escalation (CVE-2026-41091) and a