Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant

A sophisticated supply chain attack leveraged trojanized npm packages to stealthily deliver the RedC2 AI-powered Linux implant, granting attackers full-featured, cross-platform command-and-control capabilities—including credential theft, persistence, and automated post-exploitation—through simple natural-language prompts.