Nearly 800 npm packages hide a cross-platform RAT and infostealer behind fake README instructions.
A campaign of nearly 800 npm packages uses README lures and DNS tricks to deliver RATs on every platform.
A new Rust-based RAT called LabubaRAT disguises itself as NVIDIA software and supports multi-channel C2 communications.
Backdoored versions of the Axios JavaScript library, downloaded by roughly 3% of its 100M weekly userbase, deployed cross-platform RATs via…