18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

The collection reports a broad set of active and emerging cybersecurity threats, including malicious npm supply-chain packages delivering cross-platform RATs, passkey and password-manager attacks, ransomware exploitation of SonicWall VPN flaws, zero-day and critical vulnerabilities in enterprise software, AI/model supply-chain code execution, malware campaigns using fake updates and spear-phishing, cloud-service escapes, telecom core weaknesses, and large-scale phishing and credential theft. Several incidents involve active exploitation or significant potential impact, including arbitrary code