discovered 2026-04-03
36 npm packages impersonating Strapi plugins that deploy Redis RCE, steal databases and maintain persistent command and control.
Establish persistent C2 and exfiltrate databases from Strapi deployments.
