Malicious npm package posing as a WhatsApp Web API library operated for months as a functional dependency while stealing ...
A critical LangChain Core vulnerability (CVE-2025-68664, CVSS 9.3) allows secret theft and prompt injection through unsafe ...