Command injection attacks on Array AG gateways exploiting DesktopDirect since Aug 2025 prompt JPCERT to urge fast patching.
Malicious npm package mimics an ESLint plugin, embeds an AI-tricking prompt, and steals environment variables via a ...