WebRTC skimmer exploits PolyShell flaw since March 19, hitting 56.7% stores, enabling stealth data theft bypassing CSP.

A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...