Attackers used 11 Go and 2 npm packages to spread malware across platforms, putting open-source developers at risk.

SocGholish malware spreads via fake updates, impacting major threat actors through TDS systems and JavaScript loaders.