Today’s cybersecurity roundup focuses on escalating supply chain attacks affecting npm, GitHub Actions, and VS Code extensions, as well as ongoing risks from cloud credential leaks and macOS infostealers. Patch management hurdles in restricted Windows environments and international law enforcement takedowns of malicious infrastructure are also in focus.