Old flaws, weak supply-chain controls, and simple but effective exploits keep enabling major breaches and stealthy persistence across ecosystems. This week's incidents range from a $290M KelpDAO heist tied to TraderTraitor to widespread malicious npm packages deploying XWorm and minirat, active RCEs, AI prompt-injection attacks, and stealth execution techniques against trusted...