Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper
TheHackerNews

Malicious npm package downloaded 2,001 times hides payload via Unicode and Google Calendar links.
TheHackerNews
Malicious npm package downloaded 2,001 times hides payload via Unicode and Google Calendar links.