Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.

Dozens were injured and at least two killed in the intense aerial assault that damaged buildings across Ukraine’s capital ...