Compromised npm packages targeted Red Hat cloud services, enabling credential theft and expanding supply chain risks.
Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data.