The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
These entrants are competing with far bigger players, including OpenAI, Anthropic, and Microsoft, that make their own ...