May 262026 Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware 8 Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.