The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
The Hacker News

Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.
Windows Latest

Windows 11 can now run Linux containers with WSL Containers, no Docker Desktop needed (hands on)

We installed WSL Containers on Windows 11, built a custom container from scratch, tested it, and checked what still needs ...

Plex vs Jellyfin vs Emby: Here's how the three media servers really compare

Convenience will cost you with Plex, but the alternatives require more work.
ITWeb

HOSTAFRICA launches Africa's first hosting MCP server: Manage your VPS from Claude and ChatGPT

Model Context Protocol is the emerging standard that lets AI tools like Claude and ChatGPT talk directly to external services ...
Windows Report

Malicious PyPI Packages Let Hackers Control Telegram Bot Servers

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...
The Next Web

X launches hosted MCP server so AI tools can plug into its API directly

X now hosts its own MCP server, letting AI tools like Claude, Cursor, and Grok connect to the platform's API without developers building the integration.