Hiding Web 2.0 Malware in Plain Sight

This blog-style intelligence note describes a trend where attackers insert malicious iframe payloads into widely used JavaScript libraries and then use JavaScript 'packers' (obfuscators) to hide the injected code, enabling drive-by browser exploit delivery; the author recommends mitigations such as allowlists of known-good library file hashes to detect or prevent such Trojanized libraries.