Security News Malicious NPM packages fetch infostealer for Windows, Linux, macOS BleepingComputer Daniel Bender 29 Oct 2025 Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component that collects sensitive data from Windows, Linux, and macOS systems.