Hackmageddon cyber attacks timelines (Paolo Passeri)
Software developers using npm (html-to-gutenberg, fetch-page-assets) and 16 hijacked Go packages · 2026-06-24
JFrog and Nextron Systems discover hijacked npm and Go packages hiding malicious VS Code tasks disguised as font files, deploying a Socket.io backdoor and Python infostealer that harvests developer credentials, browsers, and cryptocurrency wallets. [Date Occurred: Since 25/05/2026; Date Discovered: During June 2026]