The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
Chrome 151 Beta introduces automatic punctuation for voice recognition, allowing the browser to infer commas and periods from natural speech without spoken commands.
Google is tightening Chrome extension rules with stricter privacy requirements, AI safeguards, and new bans on prediction market tools.