Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
By the time the first shell lifts off in Plainview, the public will see only the finished product.