Trojanized jQuery Packages Spread via 'Complex' Supply Chain Attack

**Supply-chain campaign distributing Trojanized jQuery packages** — Researchers found ~68 malicious packages on npm, GitHub, and jsDelivr that include a trojanized jQuery file modifying the end (and affecting fadeTo) method to steal website form data and send it to attacker-controlled domains; the packages exhibit high variability, were often published under new usernames, and appear manually assembled, increasing stealth and potential impact.