A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
AI for the office suite isn’t the most interesting thing, but it’s where the money is.