AI Summary

Researchers have identified a set of malicious npm packages that deliver a cross-platform remote access trojan to users of Alibaba developer tools. These packages, including one called "lib-mtop," have been found to target users in Chinese-speaking environments as part of a sophisticated software supply chain attack.

AI summaries can be wrong sometimes—always verify important details using the source article.