Thomas Strömberg on Nostr: Beware of geeks bearing gifts; or in this case, npm packages containing ...

Beware of geeks bearing gifts; or in this case, npm packages containing reverse-shells (system-user-identifier-cli). It's an trivial find, but a decent demo to show how our open-source detection factory is coming along: https://atomdrift.org/discoveries/2026/05/system-user-identifier-cli/