�� 36 npm packages posing as Strapi plugins were used to deliver malware that runs on install.

They exploited Redis and PostgreSQL, stole credentials, and deployed backdoors via postinstall scripts with full user or CI/CD access.

�� Details → https://thehackernews.com/2026/04/36-malicious-npm-packages-exploited.html