Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

What happened

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware (software written to damage a system or steal from it) campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx.