company
Vendor reporting the concurrent npm campaigns, including 21 packages squatting CLI binary names from Google's scoped packages and malicious Baileys forks.
No current published clusters are mapped here yet.