14 Trojanized npm Packages Drop RedC2 40 Linux Backdoor With AIAssisted C2

Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence AIpowered Linux implant dubbed RedC2 40 When the module loads it locates the bundled binary marks it executable and launches it as a detached background process TrendAI Trend Micros