The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
Sean Manaea has been running up high pitch counts, and even when he avoids major damage, getting through a lineup three times has not been easy.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results