Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer

The document is a cybersecurity news feed covering active exploitation, critical vulnerabilities, malware campaigns, supply-chain attacks, phishing, cloud and AI agent security flaws, exposed industrial systems, and ransomware activity. Notable high-impact items include actively exploited TeamCity RCE (CVE-2026-63077), WordPress pre-auth XSS enabling potential PHP code execution (CVE-2026-64638), KVM guest-to-host escape (CVE-2026-64561), Linux SCTP local privilege escalation and container escape, malicious npm packages delivering cross-platform RATs and infostealers, Microsoft 365 adversary--