Package hijacking redteam op (Research)

A Phylum blog post reports the discovery of encrypted/obfuscated npm packages that were used to target a major financial institution, suggesting a supply-chain or malware campaign that attempts to evade detection; the link likely contains technical analysis, indicators, and mitigation recommendations.