The facility was built with federal and state funding plus donor contributions. It aims to have 30 active trials by 2031.
The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
Customizing your browser to hide often makes it easier to recognize.