The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
GameSpot may receive revenue from affiliate and advertising partnerships for sharing this content and from purchases through links. Baldur’s Gate 3 and Divinity developer Larian has confirmed that it ...