November 11, 2025 at 12:55 PM #1 Npm Package Targeting GitHub-Owned Repositories Flagged as Red Team Exercise Veracode exposes npm package "@acitons/artifact" stealing GitHub tokens via build scripts. thehackernews.com