Fake install logs in npm packages load RAT https://groups.google.com/g/technical-appsec/c/tPuzctbeS6Y?utm_source=dlvr.it&utm_medium=mastodon #appsec