Security News 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants TheHackerNews Daniel Bender 05 Apr 2026 36 npm packages disguised as Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.