Stealthy npm‑package RAT targets macOS and Windows through fake Web3 interview
Security researchers uncovered a Go-based cross‑platform RAT called SStar Agent that lands via a poisoned npm package masquerading as a Tailwind CSS plugin. The malicious package is bundled into a fake Web3 engineering take‑home project, delivering the payload on both macOS and Windows when developers run npm scripts.