Sam Stepanyan :verified: 🐘<p><a href="https://infosec.exchange/tags/NPM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NPM</span></a>: New Supply Chain <a href="https://infosec.exchange/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Malware</span></a> Hits NPM and <a href="https://infosec.exchange/tags/PyPI" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PyPI</span></a> Package Ecosystems. <a href="https://infosec.exchange/tags/ReactNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ReactNative</span></a>-Aria &amp; <a href="https://infosec.exchange/tags/GlueStack" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GlueStack</span></a> packages with cumulative 1mln+ weekly downloads backdoored overnight - check your dependencies!<br><a href="https://infosec.exchange/tags/SoftwareSupplyChainSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SoftwareSupplyChainSecurity</span></a><br>👇<br><a href="https://thehackernews.com/2025/06/new-supply-chain-malware-operation-hits.html" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">thehackernews.com/2025/06/new-</span><span class="invisible">supply-chain-malware-operation-hits.html</span></a></p>