SocGholish malware spreads via fake updates, impacting major threat actors through TDS systems and JavaScript loaders.

Attackers used 11 Go and 2 npm packages to spread malware across platforms, putting open-source developers at risk.