Daily Signal - page 33A daily journal at the intersection of AI and cybersecurity. Thursday, June 4, 2026 Rust-Written IronWorm Malware Hits NPM in Credential-Propagating Supply Chain Attack supply-chain · npm · malware · credential-theft IronWorm Infostealer Hits 36 npm Packages in Supply-Chain Attack supply-chain · npm · malware · infostealer Claude Code GitHub Action Flaw Enabled Single-Issue Repository Takeover supply-chain · github · anthropic · appsec OpenAI Launches 'Dreaming' Memory System for ChatGPT openai · llm · ai-launch VS Code Vulnerability Enables One-Click GitHub Token Theft vulnerability · github · microsoft Actively Exploited Magento RCE CVE-2026-45247 Added to CISA KEV rce · cve · vulnerability · appsec Wednesday, June 3, 2026 Pakistan-Linked Actor Deploys Xeno RAT Against Afghan Finance Ministry malware · data-breach Trail of Bits: Malicious AI Skills Bypass Every Public Skill Scanner llm · ai-safety · appsec · supply-chain ← Newer Page 33 of 68 Older →
Rust-Written IronWorm Malware Hits NPM in Credential-Propagating Supply Chain Attack supply-chain · npm · malware · credential-theft
IronWorm Infostealer Hits 36 npm Packages in Supply-Chain Attack supply-chain · npm · malware · infostealer
Claude Code GitHub Action Flaw Enabled Single-Issue Repository Takeover supply-chain · github · anthropic · appsec
Trail of Bits: Malicious AI Skills Bypass Every Public Skill Scanner llm · ai-safety · appsec · supply-chain