Python

Chrome’s fifth zero-day of 2026 and the Shai-Hulud PyPI campaign targeting 19 Python packages highlight the growing convergence of browser exploitation and open-source supply chain threats.