npm supply chain attacks surge as Void Botnet uses blockchain

The Security Affairs Malware Newsletter Round 98 provides a roundup of significant articles and research pertaining to malware in the global context. Key highlights include reports on compromised npm packages like the node-ipc package, new cyber actors deploying Shai-Hulud clones, and active supply chain attacks affecting @antv packages.

The newsletter also covers cybersecurity issues such as the compromise of GitHub Actions, the disruption of the Fox Tempest cybercrime service, and the use of blockchain by the Void Botnet. Other topics feature malware detection innovations and tracking espionage campaigns by Iranian APT groups.