Obsidian plugin was abused to deploy a remote access trojan May 10, 2026 · Hacker News Read full story at source