Malicious npm Packages Infect Alibaba Tool Users with Cross-Platform RAT
Security researchers discovered 18 malicious npm packages that deliver a cross-platform remote access trojan (RAT) to users of Alibaba cloud development tools. The packages masquerade as legitimate dependencies, and once installed, they can steal sensitive data or enable remote control. This highlights an ongoing supply chain risk in the open-source ecosystem.