Evolving npm Package Campaign Targets Roblox Devs, for Years

Attackers have added aggressive social engineering to their arsenal, along with a novel Windows-manipulating persistence mechanism that demands developer vigilance.
Source: htdarkreading.com