Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper

https://thehackernews.com/2025/05/malicious-npm-package-leverages-unicode.html