An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...
Two China-linked groups ran identical Chrome/Windows zero-day exploits against NGOs, deploying different backdoors each.