AI Summary

A research team at JFrog uncovered a campaign that used 148 npm packages, each masquerading as a student web‑proxy tool. When users visited sites that loaded these packages, their browsers were hijacked and turned into nodes of a distributed denial‑of‑service botnet. The malicious activity operated for roughly two weeks during May, but the attackers did not target the developers who installed the packages.

AI summaries can be wrong sometimes—always verify important details using the source article.