⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More
The npm registry was hit a second time by a self-replicating worm dubbed "Sha1-Hulud: The Second Coming," affecting over 800 packages and 27,000 GitHub repositories and stealing API keys, cloud credentials, and npm and GitHub authentication data....