JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
GSTN has clarified mandatory Ship-to GSTIN requirements, API changes and voluntary e-Way Bill closure before the proposed 1 August 2026 ...