Hijacked npm and Go Packages Use VS Code Tasks to Deploy a Python Infostealer
Cybersecurity researchers identified two hijacked npm packages and 16 Go packages designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts.
CERT24