The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

However, the moment that has undoubtedly made the biggest impression on the most people was Jesse Marsch’s “Canadian heroes” ...