Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

Upwind traces multiple compromised AsyncAPI npm packages to a coordinated supply chain attack targeting software release pipelines and publishing identities.

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.