discovered
mgc is identified in the SafeDep analysis "Compromised npm Package mgc Deploys Multi-Platform RAT". The npm package mgc was compromised via account takeover, with four malicious versions published in rapid succession deploying a full Remote Access Trojan targeting macOS, Windows, and Linux.