New attack waves from the 'PhantomRaven' supply-chain campaign are hitting the npm registry, with dozens of malicious packages that exfiltrate sensitive data from JavaScript developers.
Generally speaking, you don't really want to be downloading anything from the dark web, if you can help it: The dark web waters are swimming with malware, scams, and otherwise unwholesome material.
The Wikimedia Foundation suffered a security incident today after a self-propagating JavaScript worm began vandalizing pages and modifying user scripts across multiple wikis.