"CISA issued warnings regarding malware-infected supply chain attacks on Daemon Tools, TanStack, and Nx Console. The incidents occurred in April and May 2026, with critical CVE vulnerabilities assigned. Developers are urged to check for compromised packages and update credentials."