Two versions of the widely used JavaScript library axios were maliciously published on npm on March 31, 2026. A hijacked ...
Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.