JFrog warns of malicious npm packages that mimic PostCSS tooling, drop a Windows RAT, and target Chrome-stored passwords through a staged infection setup route.
First seen on hackread.com
Jump to article: hackread.com/fake-npm-packages-postcss-tool-steal-chrome-password/
![]()

