A campaign of nearly 800 npm packages uses README lures and DNS tricks to deliver RATs on every platform.