JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...
The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.