The lurking code-bombs lift Discord tokens from users of any applications that pulled the packages into their code bases.
Threatpost
Posts tagged "built"
Criminals are distributing fake VPN installers with backdoors built in
Legitimate Windscribe VPN installers are being bundled with malicious files that contain backdoors.