Security News 148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet TheHackerNews Daniel Bender 14 Jul 2026 Share JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm it without updates.