Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

### Executive Summary A trojanized npm package named "oscompatible" (published Jan 9, 2024) was used to deploy a sophisticated Windows RAT via a multi-stage chain that abuses DLL search-order hijacking, decrypts additional payloads, retrieves an AnyDesk installer and a remote access DLL from a hostile domain, and implements credential/evidence collection (Chrome extension manipulation, keystroke/mouse capture, disabling shutdown). The package was removed after ~380 downloads but demonstrates a notable open-source supply-chain abuse with advanced TTPs.