This new Mac malware won’t let you use your computer until you surrender your password

ClickLock is a new macOS malware that repeatedly kills system processes and tricks victims into entering their login password ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...