May 192026 Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware 4 malicious npm packages with 3,006 downloads spread stealers and Phantom Bot, forcing removals and secret rotation.