Home Today’s Briefing Deep Dives In Play Trending For You Discover My Stack Saved Off Radar Search

Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Open Source Governance
AI Compute Contracts
Nvidia ecosystem financing
Neocloud GPU Providers
Workload Identity Federation
Voice phishing
AI compute buildout
Secrets Management
Perpetual futures
Permissionless Market Listing

How this is made

Today For You My Stack Off Radar Search

project

pretty-log 2.1.0

Second trojanized npm package, pinned to the same version, used to launch a later NodeRabbit variant.

Known aliases

pretty-log

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 distinct publisher

Mirage Kitten ships Node.js RATs through fake LinkedIn coding challenges

Kaspersky found two cross-platform JavaScript RATs, NodeRabbit and PollCat, reaching engineers in aviation and fintech through fake recruiters, from a group that until now shipped native C, C++ and Go.

Publishers:securelist.com

Reality

Evidence60
Adoption22
Hype gap+18
Incentives65

Confidence52

pretty-log 2.1.0 — project — Clarity Today