javascript 3 The Node.js loader that locks its own strings to the folder it lives in Jun 10, 2026 Bring Your Own Node: a PowerShell stager, a blockchain dead-drop, and a RAT that runs on the real Node.js May 30, 2026 A signed OneDrive, a fake note-taking app, and a payload hiding in a PNG: one ClickFix chain, five stages deep May 30, 2026