North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel deployments.

The evidence is solid but not definitive, as the conclusions rely on the absence of changes in spatial breadth and would benefit from clearer statistical justification and a more cautious ...