Microsoft Warns Developers of Fake Next.js Job Repos Delivering In-Memory Malware
Fake Next.js repos abuse VS Code and npm to run in-memory JavaScript C2; GitLab banned 131 accounts.
More info