I think most common is phishing attacks, scammers, and then shady downloads. Less common is probably dependency attacks, xss, and exploiting servers in the traditional way, and probably a bunch of other attack vectors.