Sleeper packages in Ruby and Go steal credentials and alter CI workflows, leading to persistent access and data exfiltration.
ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via ...