Trojanized jQuery Packages Spread via ‘Complex’ Supply Chain Attack

The campaign, which distributes dozens of malicious jQuery variants across npm, GitHub, and jsDelivr, appears to be a manual effort, and lacks the typical pattern that characterizes similar, related attacks.