TeamPCP PyPI attacks 🔄, HackerOne breach 📊, PureHVNC RAT 🐀, Russian GRU 🇷🇺, malicious npm packages 📦March 25, 2026