Malicious NPM Package Steals Chrome Passwords on Windows via ChromePass Recovery Tool
The malware listens for incoming connections from C2 servers and provides screen and camera access, directory listing, file lookup, file upload, shell command execution, and other capabilities.