The ChainDrop npm Worm: Reproducing the OIDC Trust Boundary That Allowed Mass Package Publicationpr0h0•8/17/2026securitynpmgithub-actionsoidcsupply-chain
Tracing the EncroChat Compromise Through GitHub-Delivered Malwarepr0h0•8/17/2026cybersecurityencrochatmalwaregithubespionage
Code-Level Indicators for MessiahGPT-Generated Malicious JavaScript in Package Supply Chainspr0h0•8/16/2026javascriptsupply-chain-securitymalware-analysiscybersecurityai-security