May 24, 2026 North Korea-Linked Hackers Deploy Second-Stage Malware via Hugging Face in npm Supply Chain Attack Using postinstall Hooks
