New npm Malware Campaign Targets Visitors Based on Their Role

A new malware campaign targeting npm users has been identified, which checks if a visitor is a victim or a researcher before initiating the infection process. This sophisticated approach aims to maximize the effectiveness of the attack while minimizing exposure to security researchers. The campaign highlights the evolving tactics used by cybercriminals in the npm ecosystem.