Reverse-engineering a targeted npm supply chain attack with two-stage C2 — full forensic analysis

The post details a forensic analysis of a targeted npm supply chain attack involving malicious packages. The attack used a two-stage command-and-control (C2) infrastructure to execute payloads. Researchers reverse-engineered the attack to uncover its mechanisms and infection chain. The analysis includes technical breakdowns of the malicious npm packages and their behavior.