14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

Cybersecurity researchers have found a group of compromised npm packages that appear to be functional calendar and streak utilities but actually deliver a Linux backdoor called RedC2 4.0. This backdoor is powered by artificial intelligence and is installed stealthily. The malicious packages launch the backdoor as a detached background process after making the bundled binary executable. The discovery was made by researchers at Trend Micro, who described the process by which the module loads and launches the binary. The RedC2 4.0 backdoor is a significant threat due to its AI-powered capabilities. The compromised packages are designed to evade detection, making them a potential risk to Linux systems.