MSC-2026-6198

Malicious npm packages impersonating the legitimate rollup-plugin-polyfill-node project. Each package embeds a staged infostealer/backdoor that runs on install, harvesting SSH keys, cloud credentials AWS, environment variables, browser profiles, editor histories, and crypto-wallet data, and grant...