Dark Reading: Evolving npm package campaign targets Roblox devs, for years

Attackers have added aggressive social engineering to their arsenal, along with a novel Windows-manipulating persistence mechanism that demands developer vigilance.

Read more: https://www.darkreading.com/threat-intelligence/evolving-npm-package-campaign-roblox-devs