Also, US media hit with JavaScript supply chain attack, while half of govt employees use out-of-date mobile OSes

in brief  A quartet of malware-laden Android apps from a single developer have been caught with malicious code more than once, yet the infected apps remain on Google Play and have collectively been downloaded more than one million times. …