The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

For the past decade or so, Canada’s economy has been flying with one engine down. It sort of worked, but then the second one ...