10:00
2026-05-03
safedep.io
ai-safety
node-env-resolve: npm Package Installs a Full RAT
The malicious npm package `node-env-resolve`, disguised as a lightweight environment configuration resolver, installs a full remote access trojan (RAT) on victim machines upon execution of `npm instal…