Summary:
- Researchers discovered 14 malicious npm packages designed to deploy the RedC2 framework on developer systems.
- The campaign utilizes supply chain attacks to compromise software development environments by injecting trojanized code into legitimate-looking dependencies.