As Morocco beat Canada to book their place in the last-8, their World Cup campaign can no longer be seen as a fairytale.
The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.