Software Supply Chain22 August 2026
RedC2 4.0: Trojanized npm Packages Ship an AI-Steered Linux Backdoor
Fourteen npm packages posing as calendar and streak-tracking utilities were caught dropping RedC2 4.0, a commercial C2 framework whose new "Red Agent" layer lets operators issue plain-language commands instead of hand-crafting beacon syntax.
npmsoftware-supply-chainmalware