New Shai-Hulud wave hits 639 npm package versions targeting @antv ecosystem with Sigstore abuse12h ago
Compromised atool npm account delivers credential stealer across 24 packages including timeago.js25h ago
Burst Statistics WordPress plugin auth bypass CVE-2026-8181 actively exploited on 115,000 sites5d ago