Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

A broad set of high-impact incidents and vulnerabilities reported by The Hacker News: supply-chain attacks continue (hijacked npm and Go packages, Miasma infections abusing GitHub Actions, Cordyceps CI/CD workflow hijacks), multiple malware campaigns (SharkLoader delivering Cobalt Strike, Gaslight macOS infostealer with prompt-injection evasion, Mistic backdoor, Turla's STOCKSTAY), and widespread exploitation/active campaigns (Signal backup recovery key phishing by Russian intelligence, Cisco Catalyst SD‑WAN zero‑day exploitation, active Lantronix EDS5000 exploitation). Notable local privilege