Nov 122025 Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories Veracode exposes npm package “@acitons/artifact” stealing GitHub tokens via build scripts.
