PostCSS npm Typosquat: How to Check If Your Machine Is Compromised (opens in new tab)

Three malicious npm packages posing as PostCSS tools have been installing a Windows RAT on developer machines. Here is how to detect them and what to do if you find them. on .