Security Affairs roundup covers malware and supply chain attacks

Security Affairs Malware Newsletter Round 120, published on 25 October 2026, is a collection of links to malware research and reporting rather than a detailed account of one incident. The topics include malicious npm packages, an attack targeting GitHub users, vulnerabilities in Plex reportedly exploited to install a cryptocurrency miner, and a backdoor in the Rank Math SEO PRO WordPress plugin, version 3.0.123.

Other links cover malware distribution through hijacked OVHcloud CLI releases and a supply-chain attack on LiteLLM that reportedly delivered credential-stealing malware and a backdoor. The newsletter also points to research on the ROMULUS ClickFix delivery platform, ArgonWiper’s encryption workflow and spyware attacks against Serbian pro-democracy figures.

It provides no technical details, affected-user counts, indicators of compromise or remediation advice for these reports; readers must consult the linked research for further information.