North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT ...

UTSA: ~20% of AI-suggested packages don't exist. Slopsquatting could let attackers slip malicious libs into projects.

The evidence is solid but not definitive, as the conclusions rely on the absence of changes in spatial breadth and would benefit from clearer statistical justification and a more cautious ...