The Hacker News

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
HotCars on MSN

RWB Porsche: The wild, wide-body 911s that redefine custom car culture

Learn about RWB wide-body modifications: $30k kit, personal installation by Nakai-san, and collector values reaching $286k ...
腾讯网

36个恶意npm包利用Redis和PostgreSQL部署持久化植入程序

网络安全研究人员在npm注册表中发现了36个恶意包，这些包伪装成Strapi CMS插件，但携带不同的有效载荷，用于Redis和PostgreSQL利用、部署反向Shell、收集凭据并投放持久化植入程序。

I found 7 open source apps so good I'd actually pay for them

'Open Sesame' goes my wallet ...