North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel deployments.
The story of GraalVM in early 2026: a project settling into a quarterly cadence, tightening its support matrix, and—thanks to Oracle—being very explicit about what it is no longer going to be.