The trans woman was forced to spend two hours at the police station and then landed in the hospital overnight.
The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.