Security News New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally TheHackerNews Daniel Bender Jun 8, 2025 Supply chain attack infects 16 GlueStack npm packages used by 1M weekly users, enabling malware that steals data and controls systems.