Malicious npm packages impersonate Alibaba tools to deliver a cross-platform RAT with command execution, persistence, and ...
I installed over 100 Claude Code plugins so you don't have to. Here's the signal from the noise.