Malicious npm and VS Code Packages
- 60+ npm packages steal system data on install.
- Harvests hostnames, IPs, DNS, and user directories.
- Sends stolen data to Discord-controlled endpoints.
- Targets Windows, macOS, and Linux systems.
- Includes sandbox-evasion techniques to avoid detection.